Re: [Gnumed-devel] bootstrapping database problem

[Karsten Hilbert]

On Fri, Sep 05, 2008 at 10:20:51AM -0700, Jim Busser wrote:

>> I believe people who are bent on using another account to
>> bootstrap better know what they do.
>
> Sorry...
No need to be sorry !

> I mainly just wanted to know if it was avoidable to have to  
> give gmadm sudo access, since giving them sudo access would allows them 
> full access to postgres (they could fully "be" postgres, changing its 
> password etc) and I thought the point of having gmadm was to constrain 
> the rights of gmadm in order to avoid their ability to monkey around with 
> other postgres databases and instances which might be on the server, etc.

The intent is correct but its a bit difficult to do.

> However would the person(s) looking after gmadm need sudo access anyway 
> to restart the postgres server, since you specified that the restart had 
> needed to be done as root.
Correct.

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346