Postgres permissions for www-data

Check out the GRANT syntax, I bet you haven't granted SELECT
permissionso to the user/table combo. -sc

On Wed, Jun 20, 2001 at 01:23:26PM +0200, tillea@rki.de wrote:

Delivered-To: chittenden.org-sean-pgsql-general@chittenden.org
From: tillea@rki.de
Date: Wed, 20 Jun 2001 13:23:26 +0200 (CEST)
X-X-Sender: <tillea@wr-linux02.rki.ivbb.bund.de>
To: PostgreSQL General <pgsql-general@postgresql.org>
Subject: [GENERAL] Postgres permissions for www-data
Precedence: bulk

Hello,

I'm using Zope 2.3.2, PostgreSQL 7.1.2 and psycopg 0.99.2.
On a Debian system Zope is running as user www-data.

I created this user using

createuser www-data

Moreover I made sure in psql:

web=# select usename from pg_user;
usename
----------
postgres
tillea
www-data
(3 rows)
web=# grant all on testtable to "web-data" ;
CHANGE

which seems to be OK so far.

Opening a database connection from Zope works well. I used the
connection string:

dbname=web

Unfortunately if I want to test the connection using

select * from testtable ;

I get

Error Type: ProgrammingError
Error Value: ERROR: testtable: Permission denied. select * from testtable ;

Looking at /var/log/postgres.log I see the following entries:

2001-06-19 14:05:24 [22300] DEBUG: connection: host=[local] user=www-data database=web
2001-06-19 14:05:43 [22300] ERROR: testtable: Permission denied.

I also studied the archive:

http://fts.postgresql.org/db/mw/msg.html?mid=53327
http://fts.postgresql.org/db/mw/msg.html?mid=30785

deal with this problem but I found no solution for this problem.
According to this mails I tried to remap the username using pg_ident.conf
but nothing helped (remapping doesn't seem to work because the log-entry
did not change).

Moreover if I try to use a connection string with any username (different
from www-data or also www-data) and password even the connection itself
fails.

Kind regards

Andreas.

---------------------------(end of broadcast)---------------------------
TIP 3: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to majordomo@postgresql.org so that your
message can get through to the mailing list cleanly

--
Sean Chittenden