From: | Ron Johnson <ron(dot)l(dot)johnson(at)cox(dot)net> |
---|---|
To: | pgsql-general(at)lists(dot)postgresql(dot)org |
Subject: | Ability to create tables |
Date: | 2018-03-09 23:13:48 |
Message-ID: | 2b6740bf-cab4-6ddf-2928-665d632efb41@cox.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hi,
Archaic v9.2.7
Even though I revoked the CREATE priv on role ABCREADONLY, it's still able
to create tables. What can I do to prevent this?
\c postgres
CREATE ROLE "ABCREADONLY" LOGIN INHERIT PASSWORD 'Flying.Fox';
GRANT CONNECT ON DATABASE "ABC123" TO "ABCREADONLY";
\c ABC123
GRANT USAGE ON SCHEMA public, ABC, tms TO "ABCREADONLY";
GRANT SELECT ON ALL TABLES IN SCHEMA public, ABC, tms TO "ABCREADONLY";
ALTER DEFAULT PRIVILEGES IN SCHEMA public, ABC, tms GRANT SELECT ON TABLES
TO "ABCREADONLY";
$ psql -c 'revoke create on database "ABC123" from "ABCREADONLY";'
REVOKE
$ psql -d ABC123 -U ABCREADONLY -c "create table bar (f1 integer);"
CREATE TABLE
$ psql -d ABC123 -U ABCREADONLY -c "\d bar"
Table "public.bar"
Column | Type | Modifiers
--------+---------+-----------
f1 | integer |
Thanks
--
Angular momentum makes the world go 'round.
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2018-03-09 23:46:15 | Re: Ability to create tables |
Previous Message | Adrian Klaver | 2018-03-09 22:24:41 | Re: how to get list of sequences owned by a user/role |