Re: db security; user identification

From: Marcin Gil <marcin(dot)gil(at)audax(dot)com(dot)pl>
To: pgsql-novice(at)postgresql(dot)org
Subject: Re: db security; user identification
Date: 2004-01-27 13:21:27
Message-ID: 401665D7.6040002@audax.com.pl
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

Martin Atukunda wrote:

> - local all all trust
> + local all postgres trust
> + local all all md5
>
Ok. but if user does:
psql -d template1 -U postgres?

then he won't be asked about password but should.
Everyone who can access psql, can get into db as postgres user.
Not safe I suppose.

--
Marcin Gil :: marcin(dot)gil(at)audax(dot)com(dot)pl

In response to

Responses

Browse pgsql-novice by date

  From Date Subject
Next Message Martin Atukunda 2004-01-27 13:54:13 Re: db security; user identification
Previous Message Nick Tew 2004-01-27 12:14:15 Emailing a list of users when a record is entered in the database.