Re: [GENERAL] Privilege for seeing queries using

2006-01-19 Thread Marc Munro
Thanks Tom, On further investigation it seems that the problem is that I can create an equivalent function with security definer, and I can create a wrapper function with security definer but I cannot modify the existing function for security definer. This is a problem because the monitoring use

Re: [GENERAL] Privilege for seeing queries using pg_stat_get_backend_activity

2006-01-19 Thread Michael Fuhr
On Thu, Jan 19, 2006 at 09:17:12AM -0800, Marc Munro wrote: > I've tried tricks with security definer functions but this does not help > as pg_stat_get_backend_activity explicitly checks for the caller being a > superuser. Works here. Could you post an example? -- Michael Fuhr

Re: [GENERAL] Privilege for seeing queries using pg_stat_get_backend_activity

2006-01-19 Thread Tom Lane
Marc Munro <[EMAIL PROTECTED]> writes: > I want certain users to be able to examine running queries using > pg_stat_get_backend_activity. Unfortunately, this will only show other > users' activity if you have superuser privilege. > I do not want to give monitoring users superuser privilege, but I

[GENERAL] Privilege for seeing queries using pg_stat_get_backend_activity

2006-01-19 Thread Marc Munro
I want certain users to be able to examine running queries using pg_stat_get_backend_activity. Unfortunately, this will only show other users' activity if you have superuser privilege. I do not want to give monitoring users superuser privilege, but I do need to allow them to perform monitoring ta