Skip site navigation (1) Skip section navigation (2)

Re: Removing a user's password

From: Michael Brusser <michael(at)synchronicity(dot)com>
To: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>,Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Removing a user's password
Date: 2003-05-26 21:07:58
Message-ID: IGEFLDJHFEOIFILGOFDJMEBPCAAA.michael@synchronicity.com (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-patches
Is setting password to NULL better then deleting user?
Mike


-----Original Message-----
From: pgsql-hackers-owner(at)postgresql(dot)org
[mailto:pgsql-hackers-owner(at)postgresql(dot)org]On Behalf Of Bruce Momjian
Sent: Monday, May 26, 2003 2:32 PM
To: Tom Lane
Cc: PostgreSQL-development
Subject: Re: [HACKERS] Removing a user's password


Tom Lane wrote:
> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> > What capabilities do we have for removing a user's password?
>
> If you set VALID UNTIL to 'now' (or sometime in the past), you've
> effectively prevented him from logging in with the password ---
> more effectively than setting the password to NULL, since if the
> user is still logged in he can just undo that.  I don't think we
> really need to do anything more here.

Well, can they undo the VALID UNTIL too?  I think at a minimum we need
to document the proper procedure for removing a password.  I see NULL as
a more logical way of removing the password rather than playing with
VALID UNTIL.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

---------------------------(end of broadcast)---------------------------
TIP 3: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
message can get through to the mailing list cleanly



In response to

Responses

pgsql-hackers by date

Next:From: Rasmus Resen AmossenDate: 2003-05-27 00:30:07
Subject: Re: Tom and Fernando: Status for "WITH RECURSIVE"
Previous:From: Larry RosenmanDate: 2003-05-26 20:42:16
Subject: Re: pl/sh

pgsql-patches by date

Next:From: Peter EisentrautDate: 2003-05-26 23:34:57
Subject: Re: Adding Rendezvous support to postmaster
Previous:From: Tom LaneDate: 2003-05-26 20:16:54
Subject: Re: Bug #928: server_min_messages (log_min_messages in CVS)

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group