Re: problems with user rights

is it really secure in a shared hosting environnement case ?
do you advise me to offer pgsql in a shared hosting ?


On Wed, 30 Mar 2005 08:04:00 -0500, John DeSoi <desoi@pgedit.com> wrote:
> > i've just added a new user called xxx :
> >
> > create user xxx with password zzz;
> >
> > now am creating it's database :
> >
> > create database db_xxx with owner xxx;
> >
> > it works fine althought when logging with the user xxx i can still
> > view other databases contents  especially pg_catalog schems.
> >
> > is it the right way to add a user ? am i wrong ?
> > i dont want to let my new user view the others databases on the server.
>
> Viewing the information in the system catalogs is open to all users.
> There is not a way to hide it unless you build an interface on top of
> PostgreSQL that limits the queries the user can execute.
>
> John DeSoi, Ph.D.
> http://pgedit.com/
> Power Tools for PostgreSQL
>
>