Re: Help with privilege or pg_hba.conf

From: "Arcadius A(dot)" <ahouans(at)sh(dot)cvut(dot)cz>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Help with privilege or pg_hba.conf
Date: 2003-07-19 22:56:50
Message-ID: bfci9k$vob$1@main.gmane.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hello!

"Arcadius A." <ahouans(at)sh(dot)cvut(dot)cz> wrote in message
news:bfcd9k$bk6$1(at)main(dot)gmane(dot)org(dot)(dot)(dot)
> Hello!
> I have a Unix box running PostgreSQL 7.3.3.
>
> So far, I have been the only one user of the DB server...and I didn't have
> any problem using it with the JDBC driver.
>
> Now, a friend of mine wants to use the DB too for doing web stuffs(PHP,
> JSP).... so I need to create a new user on PostgreSQL. this has been done
> easily.
> Now, I don't want the new user (his username is "cool",and he has a
> password ) to access other DBs on my server... I want him to access ONLY a
> database named "cool" that he owns
> (as user "cool", I have created the DB "cool"... and I want user "cool"
to
> access ONLY DB "cool" and do any operation on it).
>
> How can this be done?
>
> I've been trying to modify "pg_hba.conf" but with no luck .... as user
> "cool", after I connect to the DB server via psql and I do "\c anotherdb",
> user "cool" can still connect to "anotherdb".
> my "pg_hba.conf" can be found at http://ahouans.sh.cvut.cz/pg_hba.txt
>
> Thanks in advance.

As suggested by Richard and Andrew , I have placed
"local all cool reject"
and
"host all cool 0.0.0.0 0.0.0.0 reject"
before any line having user = 'all'

and now,
<psql>
cool=> \c mytestdb
FATAL: No pg_hba.conf entry for host localhost, user cool, database
mytestdb
Previous connection kept
cool=>
</psql>

Now, it seems to be working like I wanted.

So again, thanks so much to both of you for the help!

Arcadius Ahouansou.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2003-07-20 01:22:28 Re: Inherits tables and current CVS
Previous Message Andrew Gould 2003-07-19 22:09:25 Re: Help with privilege or pg_hba.conf