Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[ADMIN] Revoke delete on a table for super user

1 view
Skip to first unread message

Campbell, Lance

unread,
Aug 2, 2016, 1:25:30 PM8/2/16
to

PostgreSQL 9.5

Is there a way to revoke the ability to perform delete on a table for a user that is a super user?

 

I know technically you could add the access back but is it possible?

 

Thanks,

 

Lance

Tom Lane

unread,
Aug 2, 2016, 1:29:01 PM8/2/16
to
"Campbell, Lance" <la...@illinois.edu> writes:
> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?

No. Superusers bypass all access controls, by definition. Your best bet
is to not do more than you absolutely must as a superuser.

regards, tom lane


--
Sent via pgsql-admin mailing list (pgsql...@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

Ondřej Světlík

unread,
Aug 2, 2016, 4:29:39 PM8/2/16
to
Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <la...@illinois.edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best bet
> is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>

I guess you could achieve this using a trigger.

Regards,

Ondřej

Bryan Ward

unread,
Aug 2, 2016, 4:54:41 PM8/2/16
to
I think your best bet is to create a role and assign the permissions that you want to that role/user. I would not change the anything on the superuser.

Regards,
Bryan
0 new messages