[pgpool-general: 6051] Re: Access to pgpool set from an unprivileged user

Tatsuo Ishii ishii at sraoss.co.jp
Mon Apr 23 22:32:05 JST 2018


> Hey Guys, 
> 
> I have a cluster with md5 authentication.
> Pgpool-II-pg96-3.7.3 and postgresql-9.6.
> I created the user "testing" and the database "testing"
> This user has only permissions for this database, but I  found out that this user can 
> change pgpool's parameters  if I do for example:
> 
> testing=> PGPOOL set client_idle_limit = 30;
> SET
> testing=> PGPOOL SHOW client_idle_limit;
> client_idle_limit 
> -------------------
> 30
> (1 row)
> 
> How can I reduce permissions for this user and forbid access to "pgpool set" commands?

There's no way to forbid access to the command.

Best regards,
--
Tatsuo Ishii
SRA OSS, Inc. Japan
English: http://www.sraoss.co.jp/index_en.php
Japanese:http://www.sraoss.co.jp


More information about the pgpool-general mailing list