I'm having a similiar problem. On my system I have in pg_hba.conf:
[host all 127.0.0.1 255.255.255.255 password]
All users can connect to any database. This allows them to select on
designated tables via the grant command.But I can't prevent them from
creating tables. (and grant doesn't work on database object types)
Does anyone know of a way to prevent a user from creating a table
once they are connected to the database?
Thanks,
Brad
> ------------------------------
>
> Date: Wed, 22 Sep 1999 18:50:05 +0200
> From: Dirk Heinrichs <[EMAIL PROTECTED]>
> Subject: Re: [ADMIN] Access to multiple Databases
>
> On Mit, 22 Sep 1999, you wrote:
> >>Hello!
> >
> >I wonder if I can grant access to two or more databases for one user,
> without
> >letting others connect to the databases.
> >
> >Now I have the following entries in pg_hba.conf:
> >
> >-- cut --
> >host sameuser 0.0.0.0 0.0.0.0 crypt
> >host sameuser 0.0.0.0 0.0.0.0 crypt
> >
> >local template1 trust
> >host template1 127.0.0.1 255.255.255.255 trust
> >-- cut --
> >
> >So each user got access to one database, which equals to his username,
> >but I found no possibility mentioned in the docs, which would allow an
> >entry like this:
> >
> >host username dbname 0.0.0.0 0.0.0.0 crypt
> >
> >which would grant access to the database dbname for user username.
> >Is there any possibility to do something like this?
>
> AFAIK this isn't done in pg_hba.conf, but directly in the database. Per
> default, new database users, which are not admins, have no rights on a
> database (they can get a list of tables, but not their contents) unless
> the
> creator of that db grants select, insert, etc rights to them or their
> group.
>
> Bye...
>
> Dirk
>
> ************
************
