Re: Restrict Write Users

Поиск
Список
Период
Сортировка
От Erik Wienhold
Тема Re: Restrict Write Users
Дата
Msg-id 4796978.1031811.1687262753268@office.mailbox.org
обсуждение исходный текст
Ответ на Restrict Write Users  (Phani Prathyush Somayajula <phani.somayajula@pragmaticplay.com>)
Ответы Re: Restrict Write Users  (MichaelDBA <MichaelDBA@sqlexec.com>)
Список pgsql-admin
> On 20/06/2023 13:23 CEST Phani Prathyush Somayajula <phani.somayajula@pragmaticplay.com> wrote:
>
> Is there a way to restrict write access to a user by restricting the user to
> have read-only on other databases on the instance. I’m using postgresql-14
> version

You should look into https://www.postgresql.org/docs/14/ddl-priv.html.

Start with a user that has no privileges and grant additional privileges as
necessary give read and/or write access.  The user must not be the owner of
database objects, must not be a member of an owner role, and must not be
a superuser.  Also check default privileges and privileges granted to PUBLIC.

But granting privileges in one database does not affect privileges in other
databases, except for role memberships because roles are not tied to a specific
database.

--
Erik



В списке pgsql-admin по дате отправления:

Предыдущее
От: Bhasker Bathini
Дата:
Сообщение: Why do i need to install set_user extension if i can directly grant all required privileges to user?
Следующее
От: MichaelDBA
Дата:
Сообщение: Re: Restrict Write Users