Skip site navigation (1) Skip section navigation (2)

Re: Can we hide data from the superadmin

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Tarun Sharma <tarun(dot)sharma(at)newgen(dot)co(dot)in>
Cc: pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Can we hide data from the superadmin
Date: 2009-12-29 11:02:21
Message-ID: 9837222c0912290302h5c8c24c4y1f910df79ab0bf6b@mail.gmail.com (view raw or flat)
Thread:
Lists: pgsql-hackers
2009/12/29 Tarun Sharma <tarun(dot)sharma(at)newgen(dot)co(dot)in>:
> hi
>
> when a superuser is logged in to the postgres server ,he has priveledge to access all the databases.
>
> can we hide the structure of some of the databases from the superuser?
> like if he gives command to open such a database the postgres may ask for access password again.

You can use pg_hba.comf to lock down which database the superuser can
access. And then have one superuser for each database, or something
like that. But once you're in the database, you have full access.

Which is a good reason to never hand out superuser privileges, yes :-)

-- 
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/

In response to

pgsql-hackers by date

Next:From: Andres FreundDate: 2009-12-29 11:13:21
Subject: Re: [HACKERS] Faster CREATE DATABASE by delaying fsync (was 8.4.1 ubuntu karmic slow createdb)
Previous:From: Greg StarkDate: 2009-12-29 10:48:10
Subject: Re: [HACKERS] Faster CREATE DATABASE by delaying fsync (was 8.4.1 ubuntu karmic slow createdb)

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group