Subject: thread by Jessica Richards on read only permissions
From: tgl@sss.pgh.pa.us (Tom Lane)
Date: 10/26/2007 4:10:58 PM
Mija Lee <mija@scharp.org> writes:
> I wanted to follow up on the thread opened by Jessica Richards on
> granting read only permissions. Basically it sounded like there were two
> options:
> 1. granting select on each table
> 2. alter user set default_transaction_read_only to true
You do realize that #2 is completely insecure? It's only establishing a
session default, which the user can override with a simple SET.
regards, tom lane
---------------------------(end of broadcast)---------------------------
TIP 3: Have you checked our extensive FAQ?
http://www.postgresql.org/docs/faq
|