Re: user manage their own pg_hba entries

[Glenn Davy <glenn(at)tangelosoftware(dot)net>]

hi all, esp tom and sean...
just following up from this chat re allowing users to create databases
with out having to have permissions to edit pg_hba and issue a reload...

i've allowed all 'host' users to connect from 127.0.0.1/32 to all
databases, then used grant/revoke to limit what they can do - except I
cant seem to see how I can limit user A from creating tables in database
owned by user B?

is this a 'wait till 8.2' thing, or is it do-able now?
glenn

On Tue, 2006-07-25 at 12:36 -0400, Sean Davis wrote:
> 
> 
> On 7/25/06 11:41 AM, "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> 
> > Sean Davis <sdavis2(at)mail(dot)nih(dot)gov> writes:
> >> If this is the way you are going to set things up, then I would just set up
> >> all the users to connect to all databases.  Then, users can set permissions
> >> for their databases to limit privileges.
> > 
> > This will work a lot better as of 8.2; we've added a CONNECT privilege
> > for databases that can be manipulated with ordinary GRANT/REVOKE commands.
> > Unfortunately that's not in any released version :-(
> 
> This will be a nice change.  Thanks for letting us know, Tom.
> 
> Sean
>