Re: [BUGS] BUG #1497: Default permissions allow any user to create objects in any database

2005-02-27 Thread Barry Brown
First paragraph of section 17.4 (Privileges): "When a database object is created, it is assigned an owner. By default, only an owner (or a superuser) can do anything with the object. In order to allow other users to use it, privileges must be granted." To me, that paragraphs says that only

Re: [BUGS] BUG #1497: Default permissions allow any user to create objects in any database

2005-02-22 Thread Tom Lane
"Barry Brown" <[EMAIL PROTECTED]> writes: > I should not be able to do this. Not everyone would agree with you. But if you want to work that way, revoke public CREATE privileges on the public schema, and revoke public CREATE privileges on the database so people can't create new schemas.

[BUGS] BUG #1497: Default permissions allow any user to create objects in any database

2005-02-22 Thread Barry Brown
The following bug has been logged online: Bug reference: 1497 Logged by: Barry Brown Email address: [EMAIL PROTECTED] PostgreSQL version: 8.0.1 Operating system: RHEL 3.0 Description:Default permissions allow any user to create objects in any database Details: The d