Eric Lauzon wrote: Hi, > Now that the issue is that we can't implement a per connection user/ACL > pair , would it be a good idea to implement > Schema ACLS and mabey pg_hba.conf Schema acls This is certainly possible to do using GRANT and REVOKE on the schemas; no need to fool with pg_hba.conf. You can of course create groups/roles to simplify the assignment of privileges, as needed. Apart from the much more efficient queries (i.e. using cross-schema queries instead of dblink), I don't think you're going to see much change in performance, because most things like WAL and shared buffers are shared among all databases anyway. You'd save a bit by not having multiple copies of system caches (pg_class cache, etc), but I wouldn't know if that's going to be very noticeable next to the primary improvement. -- Alvaro Herrera http://www.CommandPrompt.com/ The PostgreSQL Company - Command Prompt, Inc.
