Re: security documentation

From: Richard Huxton <dev(at)archonet(dot)com>
To: jeff sacksteder <jsacksteder(at)gmail(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: security documentation
Date: 2005-09-30 07:07:38
Message-ID: 433CE43A.6040306@archonet.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

jeff sacksteder wrote:
> The security documentation available in the official documentation is rather
> sparse. Is there a more detailed document I should be aware of?

No.

> As an example, I'd like to prevent a a user from being able to get a list of
> existing databases. Presumably, I can limit access to various system
> catalogs to prevent this sort of thing, but if existing documentation exists
> it might prevent me from shooting myself in the foot too badly.

Limiting access to the system catalogues is not simple. I do recall
someone who was trying - might be worth checking the mailing list archives.

Are there any data access issues (as opposed to data visibility issues)
you are having?
--
Richard Huxton
Archonet Ltd

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Gábor Farkas 2005-09-30 07:34:31 to drop a 30GB database. is it slow?
Previous Message Richard Huxton 2005-09-30 07:04:36 Re: Many-To-Many Bridge Table Index