Re: QGIS Seem To Bypass PostgreSQL/PostGIS User Privileges/Permissions

From: Giuseppe Broccolo <giuseppe(dot)broccolo(at)2ndquadrant(dot)it>
To: John Scalia <jayknowsunix(at)gmail(dot)com>
Cc: Osahon Oduware <oduwareosahon(at)gmail(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: QGIS Seem To Bypass PostgreSQL/PostGIS User Privileges/Permissions
Date: 2017-03-17 16:13:33
Message-ID: CAFzmHiVfn4NJ1rw8Tmn1UzX=JRNAnfE=V_1Ot4JCzN0W2+8VbQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi all,

2017-03-17 17:09 GMT+01:00 John Scalia <jayknowsunix(at)gmail(dot)com>:

> While I do not know QGIS, I'm wondering if it's similar to some of our
> applications where they always use the same system login for the database
> while each user provides a unique login to the application. Have you ever
> set log_connections in your postgresql.conf file? That would show you which
> user is connecting during your attempts, and they might very well be
> something you're not expecting. As far as I know, there is no way for any
> application to bypass PostgreSQL's internal security model.
>

Exactly, so I repost here my initial question:

On Fri, Mar 17, 2017 at 4:16 PM, Giuseppe Broccolo <
> giuseppe(dot)broccolo(at)2ndquadrant(dot)it> wrote:
>
>>
>>
>> Check which user is used the first time you connect to the database
>> through QGIS, and if you switch the user to [user_name] in a second moment.
>> I'm wondering if you are keeping some privileges from a previous session.
>>
>
Regards,
Giuseppe.

--
Giuseppe Broccolo - 2ndQuadrant Italy
PostgreSQL & PostGIS Training, Services and Support
giuseppe(dot)broccolo(at)2ndQuadrant(dot)it | www.2ndQuadrant.it

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2017-03-17 16:14:29 Re: <> join selectivity estimate question
Previous Message John Scalia 2017-03-17 16:09:22 Re: QGIS Seem To Bypass PostgreSQL/PostGIS User Privileges/Permissions