Re: Allowing usernames in pg_hba.conf

Dominic J. Eidson writes:

> I'd started a long-ish post about how pgsql should have a proper
> permission model for user-to-database access - when someone pointed me to
> the following url, which I'd like to bring to everybody's attention:
>
> http://candle.pha.pa.us/cgi-bin/pgtodo?privileges
>
> Is this something PeterE's still looking at doing for 7.(I guess 3, now?)

I guess the implementation ideas have changes a little, but the code has
been generalized enough so that you can add privileges on almost anything.
Function and language privleges are available in the 7.3 branch. Those
are the ones most people wanted.

I guess you could add privileges to databases, too. But I'm wary about
keeping the connection permissions in the database because you can easily
lock yourself out that way. However, there are plenty of other ways you
can lock yourself out and in most cases you can start a standalone backend
to fix the situation. So may that would be a possibility.

--
Peter Eisentraut peter_e(at)gmx(dot)net