From: | Jessica Richard <rjessil(at)yahoo(dot)com> |
---|---|
To: | "Milen A(dot) Radev" <milen(at)radev(dot)net>, pgsql-admin(at)postgresql(dot)org |
Subject: | Re: select only user |
Date: | 2008-01-18 13:46:33 |
Message-ID: | 58370.46379.qm@web56404.mail.re3.yahoo.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
Thanks!!!
"ALTER USER username SET default_transaction_read_only to true" worked.
One more question:
where do I see the current setting of "default_transacton_read_only (true for false) for each user on the system? Is there a table that keeps this kind of info for all users?
Thanks again,
Jessica
"Milen A. Radev" <milen(at)radev(dot)net> wrote: Milen A. Radev напиÑа:
> Jessica Richard напиÑа:
>> I created a user and granted only "select" to this user so that this
>> user can only select the tables on a production system. But by
>> default, this user can also CREATE TABLE successfully....
>>
>> How can I revoke this "create table" privilege (and possible others)
>> and limit this user to only the permissions granted by me?
>>
>
> Revoke the "create" privilege on the "public" schema (or any other
> schema you've created) from 'public' (that's special "role"). Also
> revoke the "create" privilege on the database(s) in question from the
> same special role 'public' to prevent creation of new schemas.
>
> More here - http://www.postgresql.org/docs/current/static/sql-grant.html.
Almost forgot - there is another way if the role in question would be
read-only:
ALTER USER username SET default_transaction_read_only to true;
(http://archives.postgresql.org/pgsql-admin/2007-10/msg00101.php)
--
Milen A. Radev
---------------------------(end of broadcast)---------------------------
TIP 7: You can help support the PostgreSQL project by donating at
http://www.postgresql.org/about/donate
---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search.
From | Date | Subject | |
---|---|---|---|
Next Message | Milen A. Radev | 2008-01-18 13:54:46 | Re: select only user |
Previous Message | Suresh Gupta VG | 2008-01-18 13:15:17 | Cannot bind socket |