| From: | "Jim C(dot) Nasby" <jnasby(at)pervasive(dot)com> |
|---|---|
| To: | Qingqing Zhou <zhouqq(at)cs(dot)toronto(dot)edu> |
| Cc: | pgsql-general(at)postgresql(dot)org |
| Subject: | Re: How to have a blind-superuser |
| Date: | 2006-04-24 23:07:36 |
| Message-ID: | 20060424230736.GI64695@pervasive.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On Mon, Apr 24, 2006 at 06:16:30PM +0800, Qingqing Zhou wrote:
> Is it possible to have a superuser who could do CHECKPOINT, BACKUP and
> whatever but could not see any user data?
Not for backup. It'd be rather tricky to allow backing up data without
being able to read it, afterall.
I believe CHECKPOINT is protected since repeatedly calling it could
result in performance problems, but you can probably get around that if
needed by using a security-definer function.
Why do you want non-superusers to be able to checkpoint, anyway?
--
Jim C. Nasby, Sr. Engineering Consultant jnasby(at)pervasive(dot)com
Pervasive Software http://pervasive.com work: 512-231-6117
vcard: http://jim.nasby.net/pervasive.vcf cell: 512-569-9461
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2006-04-24 23:15:12 | Re: Database Selection |
| Previous Message | Jim C. Nasby | 2006-04-24 23:00:49 | Re: Database Selection |