Return-Path: pg_adm@postgres.berkeley.edu
Received: by postgres.Berkeley.EDU (5.61/1.29)
	id AA01620; Tue, 5 May 92 07:31:13 -0700
Message-Id: <9205051431.AA01620@postgres.Berkeley.EDU>
From: Stuart Pook <stuart@genethon.genethon.fr>
Subject: Using Postgres from Unix and security
To: postgres@postgres.berkeley.edu
Sender: pg_adm@postgres.berkeley.edu
Organization: Genethon, 13 Place de Rungis, 75013 Paris, France
 tel +33 1 45.65.13.00, fax +33 1 45.88.52.20
X-Face: "6o}6kk")qjUnYYq-`3_.vGq;@xj`3>#I/>4>E>DldCv:X#2%Rm+dr9HVN`g'#QgZFgsYsY
 .Q)bH:AoaW(n~=2B4aY?Q?{)1]&J+:LRX,qB>k{=6`K#2tRitzHKmi_9`}Lx0xdI*r!?MVNj7za"pZ
 *_QEm})y`y=vyyy~^0GY"HTvSCnv}eP*?{%zJ<r'BRk[r|J#;Im"Vp]!L
Date: Tue, 05 May 92 16:31:05 +0200
From: Stuart Pook <stuart@genethon.genethon.fr>

I have been reading the reference manual section
Information(unix) under the heading "Using Postgres From Unix"
where it says  "A Unix user can do nothing at all with POSTGRES 
until an appropriate record is installed in this system catalog class."
I took this to mean that nobody (other than the account postgres)
can use postgres until I run "createuser".  Is this correct?

I have compiled and installed postgres, run initdb, launched a
postmaster, and created a database called foo.  I have not run createuser.
I find that any user can run "/usr/postgres/bin/monitor foo" and change
the contents of the database foo.  This behaviour does not seem to agree
with the documentation cited above.  Am I confused?

Thanks
Stuart Pook