Обсуждение: allowing users to change the IP-addresses that are allowed to connect to postgresql

Поиск
Список
Период
Сортировка

allowing users to change the IP-addresses that are allowed to connect to postgresql

От
stig erikson
Дата:
Hello.
I have a postgresql 7.4.5 running.
On the server i have a few databases, all owned and administered by 
different users.
The users sometimes change access-rules to their databases, in 
particular they change access rules based on IP-addresses, which i have 
to do for them manually in pg_hba.conf.

is there some way to avoid the pg_hba.conf-file?
optimally i would like the access rights to be stored with the user 
and/or the database and tables. is this possible?
thus allowing users to change access rights themselfs.

if it is not possible in 7.4.5, is it planned for 8.0?

/stig


Re: allowing users to change the IP-addresses that

От
Andreas Pflug
Дата:
stig erikson wrote:
> Hello.
> I have a postgresql 7.4.5 running.

This list is for pgadmin, not for pgsql.

> On the server i have a few databases, all owned and administered by 
> different users.
> The users sometimes change access-rules to their databases, in 
> particular they change access rules based on IP-addresses, which i have 
> to do for them manually in pg_hba.conf.
> 
> is there some way to avoid the pg_hba.conf-file?
> optimally i would like the access rights to be stored with the user 
> and/or the database and tables. is this possible?
> thus allowing users to change access rights themselfs.
> 
> if it is not possible in 7.4.5, is it planned for 8.0?

No. I'd recommend using groups for that, i.e. don't use "all all" in 
pg_hba.conf, but "mydb-to-protect +group-who-may-access"

Regards,
Andreas