阿里云rds postgres回收用户权限

  • 时间:
  • 浏览:1
  • 来源:uu快3玩法_uu快3新平台_棋牌

xhc_dba=> alter table t11 owner to xhc_test;

ALTER TABLE

xhc_dba=> alter table t11 owner to xhc_rw;

ERROR: permission denied for schema public

可能回收了所有用户的create权限,所以表的所属权是不可逆的,那我属于xhc_rw的表改成xhc_test后后就非要再改回来了

xhc_dba=> d

而public 默认owner是初始化实列的用户,所以提供单将public owner改成另一方建的用户

将test,template1数据库public schema的owner给xhc_test 。

=> dn

List of schemas

3,回收create 权限

xhc_dba=> revoke create on schema public from public;

xhc_dba=> c - xhc_rw;

You are now connected to database "xhc_dba" as user "xhc_rw”. —回收成功

xhc_dba=> create table t000(id serial,id2 bigint);

ERROR: permission denied for schema public

xhc_dba=>

grant select,insert,update,delete on all tables in schema public to xhc_rw;

WARNING: no privileges were granted for “test” —可能test表那我就属于xhc_rw用户,所以会有警告,可能把test 表owner改成xhc_test就不用有警告了

xhc_dba=> grant select,usage on all sequences in schema public to xhc_rw;

GRANT

xhc_dba=> alter default privileges in schema public grant select,update,delete,insert on tables to xhc_rw;

ALTER DEFAULT PRIVILEGES

xhc_dba=> alter default privileges in schema public grant select,usage on sequences to xhc_rw;

ALTER DEFAULT PRIVILEGES

1,提工单

可能当初设计后会 用的public schema,而public schema对所有用户权限没人 限制,所以需用回收次责用户的建表权限,

=> dn

List of schemas

注1

单单回收某个用户的create权限是没人 用的,需用回收public的create权限,

hc_dba=> revoke create on schema public from xhc_rw;

REVOKe

xhc_dba=> c - xhc_rw;

You are now connected to database "xhc_dba" as user "xhc_rw".

xhc_dba=> create t000(id bigint,id2 serial primary key);

xhc_dba=> create table t000(id bigint,id2 serial primary key);

CREATE TABLE

xhc_dba=>

注2

xhc_dba=> c

psql (9.5.2, server 9.4.10)

You are now connected to database "xhc_dba" as user "xhc_rw".

xhc_dba=> d

要想后后xhc_rw对不属于另一方的表后会 读写权限需用执行以下4句

xhc_dba=> drop table t000;

都是本来回收了xhc_rw的create权限,或者xhc_rw对后后建的表还是有ddl,权限的

2,若为rds_superuser 则改为nords_superuser

xhc_dba=> alter user xhc_rw nords_superuser;

注3

hc_dba=> c

psql (9.5.2, server 9.4.10)

You are now connected to database "xhc_dba" as user "xhc_test".

xhc_dba=> dn

List of schemas