[Qgis-community-team] Fw: [SOLVED] QGIS Seem To Bypass PostgreSQL/PostGIS User Privileges/Permissions

[Oduware Godwin Osahon]

FYI


----- Forwarded Message -----
 From: Oduware Godwin Osahon <victoryaceta at yahoo.com>
 To: Yves Jacolin <yjacolin at free.fr>; "qgis-community-team at lists.osgeo.org" <qgis-community-team at lists.osgeo.org> 
 Sent: Saturday, March 18, 2017 3:10 AM
 Subject: Re: [SOLVED] QGIS Seem To Bypass PostgreSQL/PostGIS User Privileges/Permissions
   
Hi Yves,
Thanks for your response. I have been able to solve the mystery. The problem was from QGIS as suspected. When you create the first user connection to the database (PostgreSQL/PostGIS in this case) and you add a new connection with a different user or edit the first connection to a different user without restarting the application, QGIS uses the privileges of the first user connection for the new user connection (the privileges can be viewed from the Database Manager menu). This is likely a bug in the QGIS software as refreshing the edited connection or deleting the connection and creating a new one makes no difference. 

The only way I have found around this "bug" is to restart the QGIS application before creating a new user connection or editing a connection to a different user.

      From: Yves Jacolin <yjacolin at free.fr>
 To: qgis-community-team at lists.osgeo.org; Oduware Godwin Osahon <victoryaceta at yahoo.com> 
 Sent: Friday, March 17, 2017 4:59 PM
 Subject: Re: [Qgis-community-team] [URGENT!] QGIS Seem To Bypass PostgreSQL/PostGIS User Privileges/Permissions
  
Hello,

On vendredi 17 mars 2017 14:18:36 CET Oduware Godwin Osahon wrote:
> QGIS is bypassing the permissions set for the same user in the
> PostgreSQL/PostGIS database

This is not possible, imho. This is not QGIS that protects the edition process 
into your table but PostGreSQL itself.

Did you check that the user is really correct?
Did you check that your credential are still valid when working in QGIS 
(something like transaction or so)?

As far as I know this issue never occurs in my PostGIS training (I am using 
QGIS as viewer for SQL results).

Y.

   

   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-community-team/attachments/20170403/9e005627/attachment.html>