Grant Permissions for View Only
От | Chris Campbell |
---|---|
Тема | Grant Permissions for View Only |
Дата | |
Msg-id | 453A24085F801842AEA8D0B6B269065D02B7BF53D615@HDMC.cds.local обсуждение исходный текст |
Ответы |
Re: Grant Permissions for View Only
(Chris Campbell <ccampbell@cascadeds.com>)
|
Список | pgadmin-support |
<div class="WordSection1"><p class="MsoNormal">Hello,<p class="MsoNormal"> <p class="MsoNormal">Using pgAdmin III version1.14.3, PostgreSQL 9.1.5, Windows 7/64 bit<p class="MsoNormal"> <p class="MsoNormal">I’ve created a Role in a newdatabase called [appuser]. I’d like this user to be able to run queries and view data in tables, but not be able to alteranything in the given schema. So I issued the following command:<p class="MsoNormal"> <p class="MsoNormal" style="text-autospace:none"><spanstyle="font-size:9.5pt;font-family:Consolas;color:#A31515">GRANT SELECT ON ALL TABLES INSCHEMA schema1</span><span style="font-size:9.5pt;font-family:Consolas"> <span style="color:#A31515">TO appuser;</span></span><pclass="MsoNormal" style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:#A31515"> </span><pclass="MsoNormal" style="text-autospace:none"><spanstyle="color:black">I then created a new server called viewonly for the [appuser]. WhenI drill down to the tables and attempt to “view” the records, I get a permissions error.</span><p class="MsoNormal" style="text-autospace:none"><spanstyle="color:black"> </span><p class="MsoNormal" style="text-autospace:none"><span style="color:black">ERROR:permission denied for schema schema1</span><p class="MsoNormal" style="text-autospace:none"><spanstyle="color:black">Line 1: Select count(*) AS rows FROM ONLY schema1.mytable</span><p class="MsoNormal"style="text-autospace:none"><span style="color:black"> </span><p class="MsoNormal" style="text-autospace:none"><spanstyle="color:black">So I went back and added the following permission:</span><p class="MsoNormal"style="text-autospace:none"><span style="color:black"> </span><p class="MsoNormal" style="text-autospace:none"><spanstyle="font-size:9.5pt;font-family:Consolas;color:#A31515">GRANT EXECUTE ON ALL FUNCTIONSIN SCHEMA schema1 TO appuser;</span><p class="MsoNormal" style="text-autospace:none"><span style="color:black"> </span><pclass="MsoNormal" style="text-autospace:none"><span style="color:black">Didn’t work. So Ithen added:</span><p class="MsoNormal" style="text-autospace:none"><span style="color:black"> </span><p class="MsoNormal"style="text-autospace:none"><span style="font-size:9.5pt;font-family:Consolas;color:#A31515">GRANT EXECUTEON ALL FUNCTIONS IN SCHEMA public TO appuser;</span><p class="MsoNormal" style="text-autospace:none"><span style="color:black"> </span><pclass="MsoNormal" style="text-autospace:none"><span style="color:black">Still doesn’t work. </span><p class="MsoNormal" style="text-autospace:none"><span style="color:black"> </span><p class="MsoNormal" style="text-autospace:none"><spanstyle="color:black">What am I missing and how do I fix this so a user can “view” but notchange data using pgAdmin III?</span><p class="MsoNormal" style="text-autospace:none"><span style="color:black"> </span><pclass="MsoNormal" style="text-autospace:none"><span style="color:black">Thanks,</span><p class="MsoNormal"style="text-autospace:none"><span style="color:black"> </span><p class="MsoNormal" style="text-autospace:none"><spanstyle="color:black">Chris</span><p class="MsoNormal"> <p class="MsoNormal"> <p class="MsoNormal"> </div>
В списке pgadmin-support по дате отправления: