Henriksen, Jonas F wrote:
Hi,

how come, if you create a user with no permissions at all, having
been granted nothing, he can still log into any database, list
available tables, create new here, and then delete them again. Seems
odd...:

Is this right, or is there something wrong with my settings in some
way?

Schema public has default access to group public, which your new user has access to...


richardh=# GRANT ALL ON SCHEMA public TO richardh;
GRANT
richardh=# SELECT * FROM pg_namespace ;
   nspname   | nspowner |      nspacl
-------------+----------+-------------------
 public      |        1 | {=UC,richardh=UC}
...

richardh=# REVOKE ALL ON SCHEMA public FROM GROUP public;
REVOKE
richardh=# SELECT * FROM pg_namespace ;
   nspname   | nspowner |     nspacl
-------------+----------+-----------------
 public      |        1 | {=,richardh=UC}
...

*DO* make sure that one user has explict access before revoking all on public though.

--
  Richard Huxton
  Archonet Ltd

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to [EMAIL PROTECTED]

Reply via email to