From: | Jean-Luc Lachance <jllachan(at)sympatico(dot)ca> |
---|---|
To: | Randall Perry <rgp(at)systame(dot)com> |
Cc: | olly(at)lfix(dot)co(dot)uk, pgsql-admin(at)postgresql(dot)org |
Subject: | Re: How do I grant access to entire database at |
Date: | 2004-07-26 19:29:01 |
Message-ID: | 41055B7D.7000106@sympatico.ca |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
I have been thinking about this problem for quite a while.
Proper administration require creation of groups.
Adding a new user to a database is as simple as adding the user to the
group that has the required privileges to the database.
But, I think one new command would be very usefull.
CREATE GROUP <group> FROM USER <user>
where the privileges would be derived from the user's.
What do you think syntax gurus?
Randall Perry wrote:
> Thanks, I'll use it.
>
> But, if the developer's are listening -- this is really obtuse. MySQL
> administration is much easier. Please consider simplifying the GRANT process
> for future revs.
>
> BTW, I prefer postgresql for all my own development.
>
>
> on 7/18/04 4:41 PM, Oliver Elphick at olly(at)lfix(dot)co(dot)uk wrote:
>
>
>>On Sun, 2004-07-18 at 20:52, Randall Perry wrote:
>>
>>>This is a pain. Couldn't we gave something simple like
>>>GRANT ALL ON database.* TO JOE;
>>>
>>>Which would grant full access to all objects in the database to JOE for all
>>>time?
>>
>>You can do it like this in psql:
>>
>>\a
>>\t
>>\o /tmp/grant.sql
>>SELECT 'GRANT ALL ON ' || n.nspname || '.' || c.relname ||
>> ' TO joe;'
>>FROM pg_catalog.pg_class AS c
>> LEFT JOIN pg_catalog.pg_namespace AS n
>> ON n.oid = c.relnamespace
>>WHERE c.relkind IN ('r','v','S') AND
>> n.nspname NOT IN ('pg_catalog', 'pg_toast') AND
>> pg_catalog.pg_table_is_visible(c.oid)
>>ORDER BY n.nspname, c.relname;
>>\o
>>\i /tmp/grant.sql
>>
>>
>>The above could be put in a script and run from a Unix command prompt.
>>
>>(The SQL used above is adaated from that used by psql's \d command.)
>
>
From | Date | Subject | |
---|---|---|---|
Next Message | Sam Barnett-Cormack | 2004-07-26 20:05:08 | Re: How do I grant access to entire database at |
Previous Message | Sam Barnett-Cormack | 2004-07-26 19:26:30 | Re: How do I grant access to entire database at |