From: | hubert depesz lubaczewski <depesz(at)depesz(dot)com> |
---|---|
To: | pgsql-bugs(at)postgresql(dot)org |
Subject: | partially effective revoke on pg_catalog |
Date: | 2007-09-10 12:24:54 |
Message-ID: | 20070910122454.GA10364@depesz.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-bugs |
user depesz is superuser. i connect to depesz database, and:
(depesz(at)[local]:5830) 14:20:34 [depesz]
# revoke usage on schema pg_catalog from public;
REVOKE
now, i reconnect to the same database with test user (which is not
superuser):
(test(at)[local]:5830) 14:23:55 [depesz]
> \d
ERROR: permission denied for schema pg_catalog
(test(at)[local]:5830) 14:23:57 [depesz]
> select count(*) from pg_tables;
count
-------
48
(1 row)
(test(at)[local]:5830) 14:23:59 [depesz]
> select count(*) from pg_catalog.pg_tables;
ERROR: permission denied for schema pg_catalog
something looks weird here.
search_path is default:
(test(at)[local]:5830) 14:24:03 [depesz]
> show search_path;
search_path
----------------
"$user",public
(1 row)
pg version - 8.3devel from cvs.
depesz
--
quicksil1er: "postgres is excellent, but like any DB it requires a
highly paid DBA. here's my CV!" :)
http://www.depesz.com/ - blog dla ciebie (i moje CV)
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2007-09-10 14:38:34 | Re: partially effective revoke on pg_catalog |
Previous Message | Dave Page | 2007-09-10 07:38:34 | Re: BUG #3605: impossible loading |