Re: db security; user identification

Martin Atukunda wrote:

> - local all all trust
> + local all postgres trust
> + local all all md5
Ok. but if user does:
psql -d template1 -U postgres?

then he won't be asked about password but should.
Everyone who can access psql, can get into db as postgres user.
Not safe I suppose.

--
  Marcin Gil :: marcin.gil@xxxxxxxxxxxx




---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
     joining column's datatypes do not match