| From: | Jan Nielsen <jan(dot)sture(dot)nielsen(at)gmail(dot)com> |
|---|---|
| To: | pgsql-admin(at)postgresql(dot)org |
| Subject: | Monitor without superuser? |
| Date: | 2012-02-17 15:37:22 |
| Message-ID: | CANxH4hH_nJ4TkhNpUx6SeP=41WU5APvfbioY8CEr-NYLHCbnLQ@mail.gmail.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
I would like to create a role "dba_monitor" for a portion of my PG 9.1
user-base to be able to monitor PG but without granting superuser. And I
ran across this:
http://blog.kimiensoftware.com/2011/05/querying-pg_stat_activity-and-insufficient-privilege-291
Specifically, I'd like to enable the dba_monitor users to use PGAdmin III
Server Status tools which requires superuser and I would like this role to
be able write queries like:
SELECT *
FROM pg_locks
LEFT OUTER JOIN pg_class ON (pg_locks.relation = pg_class.oid)
LEFT OUTER JOIN pg_namespace ON (pg_namespace.oid =
pg_class.relnamespace),
pg_stat_activity
WHERE
NOT pg_locks.pid=pg_backend_pid()
AND pg_locks.pid=pg_stat_activity.procpid;
and be able to read all the contents, including the "current_query" which,
it appears, requires superuser.
Is this achievable? Any way around this?
Cheers,
Jan
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Cassiano, Marco | 2012-02-17 15:41:52 | Out of memory... |
| Previous Message | lst_hoe02 | 2012-02-17 15:02:31 | Re: Connections to the Database |