Re: Is there something like a limited superuser to give to a db-assistant? - Mailing list pgsql-general

From Tomas Vondra
Subject Re: Is there something like a limited superuser to give to a db-assistant?
Date
Msg-id 0c418a88231faa9b718093e29779b55b.squirrel@sq.gransy.com
Whole thread Raw
In response to Is there something like a limited superuser to give to a db-assistant?  (Andreas <maps.on@gmx.net>)
List pgsql-general
On 25 Říjen 2013, 3:53, Andreas wrote:
> Hi,
>
> how can I give adb-assistant the rights to create and drop schemas,
> tables, views ... BUT keep him out of certain existing schemas and tables?
>
> This position of an restricted db assistant is new for us and it wasn't
> considered in our access rights until now.
>
> Our DB got a wee bit komplex with about 400 schemas and 5000 tables.
> So it would get rather ugly having to alter the rights for every
> db-object one by one manually.

Hi Andreas,

I think you should read this:
http://www.postgresql.org/docs/9.3/static/sql-grant.html

You don't need superuser privileges to create schemas and so on, and by
definition "superuser" means "unrestricted". Just create a regular user
and grant him CREATE on the database. You may also grant him access only
to selected schemas/tables.

regards
Tomas



pgsql-general by date:

Previous
From: Andreas
Date:
Subject: Is there something like a limited superuser to give to a db-assistant?
Next
From: Michael Paquier
Date:
Subject: Re: Is there something like a limited superuser to give to a db-assistant?