[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Print labels

Thanks for the feedback.  In this context, the company would be connecting to Postgres directly, external to LedgerSMB.  It sounds like I would create a new role and grant SELECT priv to that role for the parts table.  That would permit the company to print labels for their products, but not do anything else w.r.t. Postgres.  Is that correct?


Brian Wolf
Phone: 410.367.2958
Email: ..hidden..
Try out Activus Secure Payments™, our recurring payments application.
On 09/05/2012 10:55 PM, Chris Travers wrote:

On Wed, Sep 5, 2012 at 4:50 PM, Brian Wolf <..hidden..> wrote:
Thanks for the feedback.  Can PostgreSQL can be configured to permit certain limited privileges from a specific IP address, and only on specific tables?  For example, only SELECT privs on the Parts table for IP address <whatever>.

Yes and no.

Grants on tables are per role.  Access per IP address does filter by role, so you can do it, but it requires thinking through the role assignments, and which IP addresses to allow that role to access which db's in the pg_hba.conf.

Best Wishes,
Chris Travers 

Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Ledger-smb-users mailing list