MySQL has this feature.  I run a multi-user system and require shared MySQL 
And PostgreSQL dbs.  I have mysql fine.  Users have their DBs and can only 
access their DBs... but theres no real way to do this in Postgres.  I can 
restrict tables, but I can still create tables in other poeples DBs.  Maybe 
only allowed to acess DBs you create or are assigned permission to

--
Mike



>From: "Martin A. Marques" <martin@math.unl.edu.ar>
>To: Michael Fork <mfork@toledolink.com>
>CC: pgsql-hackers@postgresql.org, pgsql-general@postgresql.org
>Subject: Re: Re: grant privileges to a database
>Date: Wed, 31 Jan 2001 16:41:59 -0300
>
>El Mi� 31 Ene 2001 15:53, Michael Fork escribi�:
> > This is the closest thing to what you want:
> >
> > GRANT ALL ON table TO user;
> >
> > (see http://www.postgresql.org/users-lounge/docs/7.0/user/sql-grant.htm)
>
>Yes, I'm aware of that. That's why I'm asking for an opinion of the
>developers on this issue.
>I think it would be a nice feature, so that the postgres user creates the
>database and gives all kind of permissions on that database to another 
>user,
>which doesn't have to be able to create databases.
>
>Any comments?
>
>--
>System Administration: It's a dirty job,
>but someone told I had to do it.
>-----------------------------------------------------------------
>Mart�n Marqu�s			email: 	martin@math.unl.edu.ar
>Santa Fe - Argentina		http://math.unl.edu.ar/~martin/
>Administrador de sistemas en math.unl.edu.ar
>-----------------------------------------------------------------

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.


Thu, 01 Feb 2001 00:23:10 
"Mike Miller" <temp6453@hotmail.com>
Re: Re: grant privileges to a database [URGENT]
El Miï¿½ 31 Ene 2001 21:32, Mike Miller escribiï¿½:
> MySQL has this feature.  I run a multi-user system and require shared MySQL
> And PostgreSQL dbs.  I have mysql fine.  Users have their DBs and can only
> access their DBs... but theres no real way to do this in Postgres.  I can
> restrict tables, but I can still create tables in other poeples DBs.  Maybe
> only allowed to acess DBs you create or are assigned permission to

This is what I'm talking about (sort of) and I find it a handy thing that 
informix has since at least 1995.
Lets say I have a database server and I create databases for diferent groups 
of people to populate. Thtas what grant dba would be usefull for.

Saludos... :-)

-- 
System Administration: It's a dirty job, 
but someone told I had to do it.
-----------------------------------------------------------------
Martï¿½n Marquï¿½s			email: 	martin@math.unl.edu.ar
Santa Fe - Argentina		http://math.unl.edu.ar/~martin/
Administrador de sistemas en math.unl.edu.ar
-----------------------------------------------------------------

Thu, 1 Feb 2001 08:26:49 -0300
"Martin A. Marques" <martin@math.unl.edu.ar>
Re: Re: grant privileges to a database [URGENT]
On Wed, Jan 31, 2001 at 07:18:12PM -0300, Martin A. Marques wrote:
> El Miï¿½ 31 Ene 2001 18:32, Dan Wilson escribiï¿½:
> > GRANT ALL ON table1, table2, table3, view1, view2, sequence1, sequence2 TO
> > user
> The problem is that this is not what I'm looking for. I want the user to be 
> able to create new tables, views, sequences, etc on that database.

This is nbow what people call security. Normaly only the dba (database administrator)
is allowed to create tables. But everyone can create tables, views and
sequences. The objects are than only accessible to that user. The user who
created the table has also set the security on that object.

I large company where i work, developers arent allowed to create objects on
the database, this because developers make way to soon objects or change
current tables, so the whole application doesn't work anymore. We have an
user 'postgres'. Only 4 people (there are working 72 people here) have the
ssh-key to login as postgres on the database. User postgres is the owner of
all the objects in every database. User postgres give the proper security
settings for each remote user (normaly websites, applications, etc).

I now, i looks bad, but it's really a good thing

Dave Mertens
Unix System Administrator


Thu, 1 Feb 2001 20:39:42 +0000
Dave Mertens <dave@redbull.zyprexia.com>
Re: Re: Re: grant privileges to a database [URGENT]
Hello

A few weeks ago I was interested in this question. My results were:
- Yes, this is a sorrowful but true fact that if you enable access to
  someone to a database, she is automatically enabled to create 
  objects in it.
- Yes, the developers know it, and they said: there is a patch existing
  to workaround it.
- No, they don't include it in 7.1. The reason: if you use that patch,
  pg_dumpall will not work. If somebody will have the strength in
  him to fix it, than it will be considered to include it in the base.

After collecting these informations from more experienced people,
I calmed down. Since I am in the beginning of creating my project,
I think for the time when I will need it, it will be ready.

Anyway, I do not know where this patch is. If you don't bother 
about pg_dumpall, ask a developer (a am only a wannabe developer)
about it.

If anyone detects that I wrote silly things, please do correct me.

Bye,
Baldvin





Mon, 5 Feb 2001 20:13:38 +0100 (MET)
Kovacs Baldvin <kb136@hszk.bme.hu>
Re: [HACKERS] Re: Re: grant privileges to a database [URGENT]
El Lun 05 Feb 2001 16:13, Kovacs Baldvin escribiï¿½:
> Hello
>
> A few weeks ago I was interested in this question. My results were:

I was thinking myself, and thought about this:
can't the dba access be controled from the hda.conf file for each database?

Saludos... :-)


> - Yes, this is a sorrowful but true fact that if you enable access to
>   someone to a database, she is automatically enabled to create
>   objects in it.
> - Yes, the developers know it, and they said: there is a patch existing
>   to workaround it.
> - No, they don't include it in 7.1. The reason: if you use that patch,
>   pg_dumpall will not work. If somebody will have the strength in
>   him to fix it, than it will be considered to include it in the base.
>
> After collecting these informations from more experienced people,
> I calmed down. Since I am in the beginning of creating my project,
> I think for the time when I will need it, it will be ready.
>
> Anyway, I do not know where this patch is. If you don't bother
> about pg_dumpall, ask a developer (a am only a wannabe developer)
> about it.
>
> If anyone detects that I wrote silly things, please do correct me.
>
> Bye,
> Baldvin

-- 
System Administration: It's a dirty job, 
but someone told I had to do it.
-----------------------------------------------------------------
Martï¿½n Marquï¿½s			email: 	martin@math.unl.edu.ar
Santa Fe - Argentina		http://math.unl.edu.ar/~martin/
Administrador de sistemas en math.unl.edu.ar
-----------------------------------------------------------------

Mon, 5 Feb 2001 16:52:07 -0300
"Martin A. Marques" <martin@math.unl.edu.ar>
Re: [HACKERS] Re: Re: grant privileges to a database [URGENT]