Red Hat Summit Red Hat SummitSupportKonsoleEntwicklerDemo startenKontakt

Dieser Inhalt ist in der von Ihnen ausgewählten Sprache nicht verfügbar.

2.6. Allowing Read-Only Access to the History Database

To allow access to the history database without allowing edits, you must create a read-only PostgreSQL user that can log in to and read from the ovirt_engine_history database. This procedure must be executed on the system on which the history database is installed.

Allowing Read-Only Access to the History Database

  1. Enable psql commands: 

    # . scl_source enable rh-postgresql95
    Copy to Clipboard Toggle word wrap

  2. Create the user to be granted read-only access to the history database: 

    # psql -U postgres -c "CREATE ROLE username WITH LOGIN ENCRYPTED PASSWORD 'password';" -d ovirt_engine_history
    Copy to Clipboard Toggle word wrap

  3. Grant the newly created user permission to connect to the history database: 

    # psql -U postgres -c "GRANT CONNECT ON DATABASE ovirt_engine_history TO username;"
    Copy to Clipboard Toggle word wrap

  4. Grant the newly created user usage of the public schema: 

    # psql -U postgres -c "GRANT USAGE ON SCHEMA public TO username;" ovirt_engine_history
    Copy to Clipboard Toggle word wrap

  5. Generate the rest of the permissions that will be granted to the newly created user and save them to a file: 

    # psql -U postgres -c "SELECT 'GRANT SELECT ON ' || relname || ' TO username;' FROM pg_class JOIN pg_namespace ON pg_namespace.oid = pg_class.relnamespace WHERE nspname = 'public' AND relkind IN ('r', 'v');" --pset=tuples_only=on  ovirt_engine_history > grant.sql
    Copy to Clipboard Toggle word wrap

  6. Use the file you created in the previous step to grant permissions to the newly created user: 

    # psql -U postgres -f grant.sql ovirt_engine_history
    Copy to Clipboard Toggle word wrap

  7. Remove the file you used to grant permissions to the newly created user: 

    # rm grant.sql
    Copy to Clipboard Toggle word wrap

  8. Add the following lines for the newly created user to /var/opt/rh/rh-postgresql95/lib/pgsql/data/pg_hba.conf: 

    # TYPE  DATABASE                USER           ADDRESS                 METHOD
host    ovirt_engine_history    username    0.0.0.0/0               md5
host    ovirt_engine_history    username    ::0/0                   md5
    Copy to Clipboard Toggle word wrap

  9. Reload the PostgreSQL service: 

    # systemctl reload rh-postgresql95-postgresql
    Copy to Clipboard Toggle word wrap

  10. You can test the read-only user’s access permissions: 

    # psql -U username ovirt_engine_history -h localhost
Password for user username:
psql (9.2.23)
Type "help" for help.

ovirt_engine_history=>
    Copy to Clipboard Toggle word wrap
  11. To exit the ovirt_engine_history database, enter \q.

The read-only user’s SELECT statements against tables and views in the ovirt_engine_history database succeed, while modifications fail.

Nach oben
Red Hat logoGithubredditYoutubeTwitter

Lernen

Testen, kaufen und verkaufen

Communitys

Über Red Hat Dokumentation

Wir helfen Red Hat Benutzern, mit unseren Produkten und Diensten innovativ zu sein und ihre Ziele zu erreichen – mit Inhalten, denen sie vertrauen können. Entdecken Sie unsere neuesten Updates.

Mehr Inklusion in Open Source

Red Hat hat sich verpflichtet, problematische Sprache in unserem Code, unserer Dokumentation und unseren Web-Eigenschaften zu ersetzen. Weitere Einzelheiten finden Sie in Red Hat Blog.

Über Red Hat

Wir liefern gehärtete Lösungen, die es Unternehmen leichter machen, plattform- und umgebungsübergreifend zu arbeiten, vom zentralen Rechenzentrum bis zum Netzwerkrand.

Theme

© 2025 Red Hat