Re: User rights

On Wed, 13 Jun 2001, Tom Lane wrote:

TL> Nicolas Kowalski <Nicolas(dot)Kowalski(at)imag(dot)fr> writes:
TL> > The problem is, if a user tries to authenticate and is not in the
TL> > pg_shadow system table but *is* in the passwd file, the access will
TL> > always fail. If the user appears in the pg_shadow table, no problems.
TL>
TL> If you're not in pg_shadow you are not a postgres user. Bogus
TL> entries in password files won't help you.

Normal behaviour. Ok, I surrender.

TL>
TL> > By mistake, I deleted a user (me in fact) from the pg_shadow table. I
TL> > was the owner of several tables. As a superuser, I re-created the user,
TL> > with the same information, sysid included. But now, I am unable to
TL> > manage or even do some SELECT on the table I was the owner. I checked
TL> > the relowner field in the pg_class table, and it has the value of my
TL> > sysid...
TL>
TL> Hmm, that should work, if you're sure you got the right sysid. Also
TL> check to make sure there is only one row in pg_shadow with that sysid.

As superuser :

datavm=# SELECT usename,usesysid from pg_shadow where
usename='kowalski';
usename | usesysid
----------+----------
kowalski | 5519
(1 row)

datavm=# SELECT usename,usesysid from pg_shadow where usesysid='5519';
usename | usesysid
----------+----------
kowalski | 5519
(1 row)

datavm=# SELECT relowner from pg_class where relname='sys_machine';
relowner
----------
5519
(1 row)

datavm=# SELECT relowner from pg_class where relname='sys_equipment';
relowner
----------
5519
(1 row)

datavm=# \dz
...
sys_machine | {"=","admin=r"}
...
sys_equipment |
...

As user kowalski :

datavm=> SELECT * from sys_machine ;
ERROR: sys_machine: Permission denied.

datavm=> SELECT * from sys_equipment ;
id | description | delivery | ownership | location | invoice_id
| comme
nt
-----+------------------+------------+-----------+----------+------------+------
---
9 | IMPRIMANTE | 1996-11-12 | P | VERIMAG |
|
1 | LECTEUR DE BANDE | 1997-07-16 | P | VERIMAG |
|
204 | MAC PORTABLE | 2000-06-27 | P | VERIMAG |

...and so on.

What is wrong ?

Nicolas.