Eric Lauzon wrote:

Hi,

> Now that the issue is that we can't implement a per connection user/ACL
> pair  , would it be a good idea to implement
> Schema ACLS and mabey pg_hba.conf Schema acls 

This is certainly possible to do using GRANT and REVOKE on the schemas;
no need to fool with pg_hba.conf.  You can of course create groups/roles
to simplify the assignment of privileges, as needed.

Apart from the much more efficient queries (i.e. using cross-schema
queries instead of dblink), I don't think you're going to see much
change in performance, because most things like WAL and shared buffers
are shared among all databases anyway.  You'd save a bit by not having
multiple copies of system caches (pg_class cache, etc), but I wouldn't
know if that's going to be very noticeable next to the primary
improvement.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.

---------------------------(end of broadcast)---------------------------
TIP 3: Have you checked our extensive FAQ?

               http://www.postgresql.org/docs/faq

Reply via email to