Red Hat Summit Red Hat SummitSupportoConsoleSviluppatoriInizia una provaContatti

Questo contenuto non è disponibile nella lingua selezionata.

2.6. Allowing Read-Only Access to the History Database

To allow access to the history database without allowing edits, you must create a read-only PostgreSQL user that can log in to and read from the ovirt_engine_history database. This procedure must be executed on the system on which the history database is installed.

Allowing Read-Only Access to the History Database

  1. Enable psql commands: 

    # . scl_source enable rh-postgresql95
    Copy to Clipboard Toggle word wrap

  2. Create the user to be granted read-only access to the history database: 

    # psql -U postgres -c "CREATE ROLE username WITH LOGIN ENCRYPTED PASSWORD 'password';" -d ovirt_engine_history
    Copy to Clipboard Toggle word wrap

  3. Grant the newly created user permission to connect to the history database: 

    # psql -U postgres -c "GRANT CONNECT ON DATABASE ovirt_engine_history TO username;"
    Copy to Clipboard Toggle word wrap

  4. Grant the newly created user usage of the public schema: 

    # psql -U postgres -c "GRANT USAGE ON SCHEMA public TO username;" ovirt_engine_history
    Copy to Clipboard Toggle word wrap

  5. Generate the rest of the permissions that will be granted to the newly created user and save them to a file: 

    # psql -U postgres -c "SELECT 'GRANT SELECT ON ' || relname || ' TO username;' FROM pg_class JOIN pg_namespace ON pg_namespace.oid = pg_class.relnamespace WHERE nspname = 'public' AND relkind IN ('r', 'v');" --pset=tuples_only=on  ovirt_engine_history > grant.sql
    Copy to Clipboard Toggle word wrap

  6. Use the file you created in the previous step to grant permissions to the newly created user: 

    # psql -U postgres -f grant.sql ovirt_engine_history
    Copy to Clipboard Toggle word wrap

  7. Remove the file you used to grant permissions to the newly created user: 

    # rm grant.sql
    Copy to Clipboard Toggle word wrap

  8. Add the following lines for the newly created user to /var/opt/rh/rh-postgresql95/lib/pgsql/data/pg_hba.conf: 

    # TYPE  DATABASE                USER           ADDRESS                 METHOD
host    ovirt_engine_history    username    0.0.0.0/0               md5
host    ovirt_engine_history    username    ::0/0                   md5
    Copy to Clipboard Toggle word wrap

  9. Reload the PostgreSQL service: 

    # systemctl reload rh-postgresql95-postgresql
    Copy to Clipboard Toggle word wrap

  10. You can test the read-only user’s access permissions: 

    # psql -U username ovirt_engine_history -h localhost
Password for user username:
psql (9.2.23)
Type "help" for help.

ovirt_engine_history=>
    Copy to Clipboard Toggle word wrap
  11. To exit the ovirt_engine_history database, enter \q.

The read-only user’s SELECT statements against tables and views in the ovirt_engine_history database succeed, while modifications fail.

Torna in cima
Red Hat logoGithubredditYoutubeTwitter

Formazione

Prova, acquista e vendi

Community

Informazioni sulla documentazione di Red Hat

Aiutiamo gli utenti Red Hat a innovarsi e raggiungere i propri obiettivi con i nostri prodotti e servizi grazie a contenuti di cui possono fidarsi. Esplora i nostri ultimi aggiornamenti.

Rendiamo l’open source più inclusivo

Red Hat si impegna a sostituire il linguaggio problematico nel codice, nella documentazione e nelle proprietà web. Per maggiori dettagli, visita il Blog di Red Hat.

Informazioni su Red Hat

Forniamo soluzioni consolidate che rendono più semplice per le aziende lavorare su piattaforme e ambienti diversi, dal datacenter centrale all'edge della rete.

Theme

© 2025 Red Hat