Re: Privilege for seeing queries using pg_stat_get_backend_activity - Mailing list pgsql-general

From Tom Lane
Subject Re: Privilege for seeing queries using pg_stat_get_backend_activity
Date
Msg-id 17754.1137692320@sss.pgh.pa.us
Whole thread Raw
In response to Privilege for seeing queries using pg_stat_get_backend_activity  (Marc Munro <marc@bloodnok.com>)
Responses Re: Privilege for seeing queries using
List pgsql-general
Marc Munro <marc@bloodnok.com> writes:
> I want certain users to be able to examine running queries using
> pg_stat_get_backend_activity.  Unfortunately, this will only show other
> users' activity if you have superuser privilege.
> I do not want to give monitoring users superuser privilege, but I do
> need to allow them to perform monitoring tasks.
> I've tried tricks with security definer functions but this does not help
> as pg_stat_get_backend_activity explicitly checks for the caller being a
> superuser.

That should work fine, as the test is on the current effective userid
which will change inside a security-definer function.  Take a closer
look at what you did, or post a complete example if you can't get it
to work.

            regards, tom lane

pgsql-general by date:

Previous
From: Tom Lane
Date:
Subject: Re: create plperlu langage fails
Next
From: Ledina Hido
Date:
Subject: