Re: How to allow users to log on only from my application not from pgadmin

From: Ron Johnson <ron(dot)l(dot)johnson(at)cox(dot)net>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: How to allow users to log on only from my application not from pgadmin
Date: 2007-02-01 02:13:20
Message-ID: 45C14CC0.1040505@cox.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/31/07 20:00, Paul Lambert wrote:
> Mark Walker wrote:
>> One other thing. Another approach to this problem would be to have
>> some sort of code signing/authentication capabilities for the
>> postgresql server. For instance, you login as an administrator (some
>> sort of enhanced privs), you get to look at the databases you have
>> permission for. Otherwise, postgresql has to recognize the
>> application. Has this ever been discussed?
>
> I don't think it would be feasible for any RDBMS to recognise the
> connecting application, certainly in my view the effort it would take to
> alter the postmaster/odbc driver and others would be a lot more than the
> apparent gain from having that functionality.

I think that capability is already part of the ODBC spec. Well, at
least, the ODBC driver for Rdb (http://www.oracle.com/rdb) and it's
remote-access framework (SQL/Services) knows the name of the apps
that attach.

$ MCR SQLSRV_MANAGE71
SQLSRV> CONNECT SERVER;
Connecting to server ...
Connected
SQLSRV> SHOW CLIENT;
Service: VECTOR_REF

Connect Client Executor
Username Node State PID Application
PROC_RPT 138.69.183.166 RUNNING BOUND 2025a062 Winsql
PROC_RPT 138.69.183.216 RUNNING BOUND 202864f7 erdpro

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFwUzAS9HxQb37XmcRAhc9AJ9QBUaSIWi7zNXaViGPE1CfgiG8qQCgump0
Ys78nYGFPzNjKrlnu/CfU0M=
=0OCA
-----END PGP SIGNATURE-----

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Mark Walker 2007-02-01 02:54:15 Re: How to allow users to log on only from my application not from pgadmin
Previous Message Mark Walker 2007-02-01 02:10:28 Re: How to allow users to log on only from my application not from pgadmin