<html>
Tom<br><br>
Thank you - I think that the underlying problem is that I was trying
out<br><br>
REVOKE ALL FROM TABLE suppliers FOR public;<br><br>
then connect as hilary and I can still see the table rows.<br><br>
I appear to have to revoke each type eg<br>
REVOKE SELECT FROM TABLE suppliers FOR public;<br>
etc and then the code works.<br><br>
Is this a known bug in this version (7.4.1)?<br><br>
Thanks<br>
Hilary<br><br>
<br>
At 18:08 20/07/2006 -0400, Tom Lane wrote:<br><br>
<blockquote type=cite class=cite cite>Hilary Forbes
<hforbes(at)dmr(dot)co(dot)uk> writes:<br>
> I have an existing table suppliers and I have created a new
user<br>
> 'hilary'<br><br><br>
> REVOKE ALL on TABLE suppliers FROM hilary;<br><br><br>
> now login as hilary<br><br>
> SELECT * from suppliers;<br><br>
> and I get all the records!!!<br><br><br><br>
Most likely there's been a grant of (at least) select privilege to
PUBLIC.<br>
You'll need to revoke that if you don't want every user to have
that<br>
privilege implicitly.<br><br>
<x-tab> </x-tab><x-tab> </x-tab><x-tab> </x-tab>regards,
tom lane<br><br>
---------------------------(end of
broadcast)---------------------------<br>
TIP 6: explain analyze is your friend</blockquote>
<x-sigsep><p></x-sigsep>
Hilary Forbes<br>
DMR Limited (UK registration 01134804) <br>
A DMR Information and Technology Group company
(<a href="http://www.dmr.co.uk/" eudora="autourl"><font color="#0000FF"><u>www.dmr.co.uk</a></u></font>)
<br>
Direct tel 01689 889950 Fax 01689 860330 <br>
DMR is a UK registered trade mark of DMR Limited<br>
**********************************************************</html>