Re: Help with privilages please

From: "Andrew Hammond" <andrew(dot)george(dot)hammond(at)gmail(dot)com>
To: pgsql-sql(at)postgresql(dot)org
Subject: Re: Help with privilages please
Date: 2006-07-26 19:29:56
Message-ID: 1153942196.315797.27900@75g2000cwc.googlegroups.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-sql

7.4.1 is quite old and has a number of serious known bugs. I'd suggest
you either upgrade to 8.1.4 (current) or, if you can't do that, at
least upgrade to 7.4.13 (latest 7.4) immediately.

Hilary Forbes wrote:
> Tom
>
> Thank you - I think that the underlying problem is that I was trying out
>
> REVOKE ALL FROM TABLE suppliers FOR public;
>
> then connect as hilary and I can still see the table rows.
>
> I appear to have to revoke each type eg
> REVOKE SELECT FROM TABLE suppliers FOR public;
> etc and then the code works.
>
> Is this a known bug in this version (7.4.1)?
>
> Thanks
> Hilary
>
>
> At 18:08 20/07/2006 -0400, Tom Lane wrote:
>
> Hilary Forbes <hforbes(at)dmr(dot)co(dot)uk> writes:
> > I have an existing table suppliers and I have created a new user
> > 'hilary'<br><br>
> > REVOKE ALL on TABLE suppliers FROM hilary;<br><br>
> > now login as hilary<br>
> > SELECT * from suppliers;<br>
> > and I get all the records!!!<br><br>
>
> Most likely there's been a grant of (at least) select privilege to PUBLIC.
> You'll need to revoke that if you don't want every user to have that
> privilege implicitly.
>
> regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 6: explain analyze is your friend
>
> Hilary Forbes
> DMR Limited (UK registration 01134804)
> A DMR Information and Technology Group company (_www.dmr.co.uk_)
> Direct tel 01689 889950 Fax 01689 860330
> DMR is a UK registered trade mark of DMR Limited
> **********************************************************

In response to

Browse pgsql-sql by date

  From Date Subject
Next Message Bruno Wolff III 2006-07-26 20:39:54 Re: Storing an ordered list
Previous Message Andrew Hammond 2006-07-26 19:25:31 Re: Rows with exclusive lock