Re: Can we hide data from the superadmin

Поиск
Список
Период
Сортировка
От Magnus Hagander
Тема Re: Can we hide data from the superadmin
Дата
Msg-id 9837222c0912290302h5c8c24c4y1f910df79ab0bf6b@mail.gmail.com
обсуждение исходный текст
Ответ на Can we hide data from the superadmin  ("Tarun Sharma" <tarun.sharma@newgen.co.in>)
Список pgsql-hackers
2009/12/29 Tarun Sharma <tarun.sharma@newgen.co.in>:
> hi
>
> when a superuser is logged in to the postgres server ,he has priveledge to access all the databases.
>
> can we hide the structure of some of the databases from the superuser?
> like if he gives command to open such a database the postgres may ask for access password again.

You can use pg_hba.comf to lock down which database the superuser can
access. And then have one superuser for each database, or something
like that. But once you're in the database, you have full access.

Which is a good reason to never hand out superuser privileges, yes :-)

-- Magnus HaganderMe: http://www.hagander.net/Work: http://www.redpill-linpro.com/


В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Tarun Sharma"
Дата:
Сообщение: Can we hide data from the superadmin
Следующее
От: Andres Freund
Дата:
Сообщение: Re: Faster CREATE DATABASE by delaying fsync (was 8.4.1 ubuntu karmic slow createdb)