Setup for a db class

[Terry Letsche]

Hi. I'm running postgresql on a Debian box, and plan to use it for
teaching a database class. While installing some graphical tools for the
students (namely pgadmin3), I discovered that the students could see each
other's work by simply browsing to someone else's database. What am I
missing on permissions? Each student's database is set to be owned by
them, but the contents are still browsable.

Any suggestions on configuration for a similar lab situation are welcome!

Terry

[Goulet, Dick]

Terry,

In pga_conf.hba you can setup to restrict access to the other databases as in:

# TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
# IPv6-style local connections:
host db1 usr1 ::1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff trust
host db2 usr2 172.20.0.0 255.255.0.0 trust
host db3 usr3 172.17.0.0 255.255.0.0 trust

Dick Goulet
Senior Oracle DBA
Oracle Certified 8i DBA

-----Original Message-----
From: Terry Letsche [mailto:***@letsche.net]
Sent: Tuesday, September 14, 2004 2:47 PM
To: pgsql-***@postgresql.org
Subject: [ADMIN] Setup for a db class



Hi. I'm running postgresql on a Debian box, and plan to use it for
teaching a database class. While installing some graphical tools for the
students (namely pgadmin3), I discovered that the students could see each
other's work by simply browsing to someone else's database. What am I
missing on permissions? Each student's database is set to be owned by
them, but the contents are still browsable.

Any suggestions on configuration for a similar lab situation are welcome!

Terry
--
Terry Letsche | http://terry.letsche.net | terry at letsche dot net

---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/docs/faqs/FAQ.html

---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/docs/faqs/FAQ.html

[Oliver Elphick]

Post by Goulet, Dick
Terry,
# TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
host db1 usr1 ::1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff trust
host db2 usr2 172.20.0.0 255.255.0.0 trust
host db3 usr3 172.17.0.0 255.255.0.0 trust

You can also put "sameuser" as the database, to restrict it to a user of
the same name as the database.
--
Oliver Elphick ***@lfix.co.uk
Isle of Wight http://www.lfix.co.uk/oliver
GPG: 1024D/A54310EA 92C8 39E7 280E 3631 3F0E 1EC0 5664 7A2F A543 10EA
========================================
"But without faith it is impossible to please him; for
he that cometh to God must believe that he is, and
that he is a rewarder of them that diligently seek
him." Hebrews 11:6


---------------------------(end of broadcast)---------------------------
TIP 6: Have you searched our list archives?

http://archives.postgresql.org