"Ing. Daniel Manrique" <dmanriqu@xxxxxxxxxxxxxxxxxx> writes: > I'd like to configure things so that: > a) users are unable to modify template1; If you're on a PG version where template1 isn't the default connection target, you could just disallow connections to it. But that might just mean that your problem moves over to the "postgres" database. > b) Users can't connect to databases other than the ones they created > (and perhaps the postgres database, for initial connection purposes). See CONNECT privilege (as of 8.2) and/or modify pg_hba.conf. regards, tom lane