Hi,
how come, if you create a user with no permissions at all, having been granted nothing, he can still log into any database, list available tables, create new here, and then delete them again. Seems odd...:
Is this right, or is there something wrong with my settings in some way?
Schema public has default access to group public, which your new user has access to...
richardh=# GRANT ALL ON SCHEMA public TO richardh; GRANT richardh=# SELECT * FROM pg_namespace ; nspname | nspowner | nspacl -------------+----------+------------------- public | 1 | {=UC,richardh=UC} ...
richardh=# REVOKE ALL ON SCHEMA public FROM GROUP public; REVOKE richardh=# SELECT * FROM pg_namespace ; nspname | nspowner | nspacl -------------+----------+----------------- public | 1 | {=,richardh=UC} ...
*DO* make sure that one user has explict access before revoking all on public though.
-- Richard Huxton Archonet Ltd
---------------------------(end of broadcast)--------------------------- TIP 1: subscribe and unsubscribe commands go to [EMAIL PROTECTED]