On Feb 19, 2007, at 10:32 AM, David Legault wrote:
Is there a way to attach roles to only certain databases so that
the login [from PHP pg_connect(username, password, database)] is
tied to that particular database and any creation of roles (users/
groups) can be constrained into that particular database.
I plan to use the roles system to be able to create the users/
groups access/permissions and I would like to have them isolated on
a per database basis instead of having them in a situation that
Role A (user) belonging to DB C could also be used in DB D
(security issue).
You can GRANT and REVOKE on database connect privileges. See
http://www.postgresql.org/docs/8.2/interactive/sql-grant.html
John DeSoi, Ph.D.
http://pgedit.com/
Power Tools for PostgreSQL