[ADMIN] How was I able to drop a role even though objects depend on it?

2013-07-01 Thread Wojciechowski, Robert (GE Transportation)
I’ve noticed a weird situation on one of our development servers running PostgreSQL 9.1.3 where roles have been dropped even though objects depend on that user. I didn’t think that was possible due to the dependency checks on DROP USER/ROLE. For example, there is a database that shows this conne

Re: [ADMIN] How was I able to drop a role even though objects depend on it?

2013-07-01 Thread Alvaro Herrera
Wojciechowski, Robert (GE Transportation) wrote: > I’ve noticed a weird situation on one of our development servers running > PostgreSQL 9.1.3 where roles have been dropped even though objects depend on > that user. I didn’t think that was possible due to the dependency checks on > DROP USER/ROL

Re: [ADMIN] How was I able to drop a role even though objects depend on it?

2013-07-01 Thread David Johnston
Wojciechowski, Robert (GE Transportation) wrote > [...] there is a database that shows this connect grant to a user that was > known as foo1_userA (oid 3562339547): 3562339547=c/postgres The main user dependent situation is having said user OWNER on a database object. Simply giving a user connec

[ADMIN] one client with multiple ssl cert connections to different databases

2013-07-01 Thread Megan
Good Day All I setup my postgres servers to allow certificate authentication. Right now I have two database servers and one application server. Users are only allowed to connect into the application server, invoke psql, then connect into which ever database server they want. I have the keys an

Re: [ADMIN] one client with multiple ssl cert connections to different databases

2013-07-01 Thread Magnus Hagander
On Mon, Jul 1, 2013 at 7:03 PM, Megan wrote: > Good Day All > > > I setup my postgres servers to allow certificate authentication. Right now > I have two database servers and one application server. Users are only > allowed to connect into the application server, invoke psql, then connect > into

Re: [ADMIN] How was I able to drop a role even though objects depend on it?

2013-07-01 Thread Alvaro Herrera
David Johnston wrote: > Wojciechowski, Robert (GE Transportation) wrote > > [...] there is a database that shows this connect grant to a user that was > > known as foo1_userA (oid 3562339547): 3562339547=c/postgres > > The main user dependent situation is having said user OWNER on a database > ob

Re: [ADMIN] How was I able to drop a role even though objects depend on it?

2013-07-01 Thread David Johnston
Alvaro Herrera-9 wrote > David Johnston wrote: >> Wojciechowski, Robert (GE Transportation) wrote >> > [...] there is a database that shows this connect grant to a user that >> was >> > known as foo1_userA (oid 3562339547): 3562339547=c/postgres >> >> The main user dependent situation is having s