Lamar Owen <lamar.owen@wgcr.org> writes:
> Appending '@template1' to unadorned usernames, and giving inherited rights
> across the installation to users with template1 rights? Then you have the
> unadorned 'lowen' becomes 'lowen@template1' -- but lowen@pari wouldn't have
> access to template1, right?
If not, standard things like "psql -l" won't work for lowen@pari. I don't
think we can get away with a scheme that depends on disallowing access
to template1 for most people.
It should also be noted that the whole point of this little project was
to do something *simple* ... checking access to some other database to
decide what we will allow is getting a bit far afield from simple.
regards, tom lane
