Re: Removing a user's password

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: michael(at)synchronicity(dot)com
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Removing a user's password
Date: 2003-05-27 01:45:18
Message-ID: 200305270145.h4R1jIX06597@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

Michael Brusser wrote:
> Is setting password to NULL better then deleting user?
> Mike

They are different. Remove password allows the user to still log into
other non-password databases. Removing the user prevents any
connection.

---------------------------------------------------------------------------

>
>
> -----Original Message-----
> From: pgsql-hackers-owner(at)postgresql(dot)org
> [mailto:pgsql-hackers-owner(at)postgresql(dot)org]On Behalf Of Bruce Momjian
> Sent: Monday, May 26, 2003 2:32 PM
> To: Tom Lane
> Cc: PostgreSQL-development
> Subject: Re: [HACKERS] Removing a user's password
>
>
> Tom Lane wrote:
> > Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> > > What capabilities do we have for removing a user's password?
> >
> > If you set VALID UNTIL to 'now' (or sometime in the past), you've
> > effectively prevented him from logging in with the password ---
> > more effectively than setting the password to NULL, since if the
> > user is still logged in he can just undo that. I don't think we
> > really need to do anything more here.
>
> Well, can they undo the VALID UNTIL too? I think at a minimum we need
> to document the proper procedure for removing a password. I see NULL as
> a more logical way of removing the password rather than playing with
> VALID UNTIL.
>
> --
> Bruce Momjian | http://candle.pha.pa.us
> pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
> + If your life is a hard drive, | 13 Roberts Road
> + Christ can be your backup. | Newtown Square, Pennsylvania 19073
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
> message can get through to the mailing list cleanly
>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo(at)postgresql(dot)org
>

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2003-05-27 02:31:36 Re: [BUGS] Bug #928: server_min_messages (log_min_messages in CVS)
Previous Message Rasmus Resen Amossen 2003-05-27 00:30:07 Re: Tom and Fernando: Status for "WITH RECURSIVE"

Browse pgsql-patches by date

  From Date Subject
Next Message Alvaro Herrera 2003-05-27 02:30:27 Re: New translation
Previous Message Peter Eisentraut 2003-05-26 23:34:57 Re: Adding Rendezvous support to postmaster