Tom Lane wrote:
> If your pg_hba.conf looks like
> host all all 0.0.0.0/32 md5
> there's not much call to update it dynamically ...
>
>
There'll be a call to update it once - to 0.0.0.0/0 ;-)
I guess you proved the point about how easy it is the get wrong ;-)
(sorry, couldn't resist)
But it's not clear to me why a CONNECT right shouldn't encompass all the things that hba does, i.e. connect method, source address and auth method.
cheers
andrew