Re: Help with privilages please

From: Hilary Forbes <hforbes(at)dmr(dot)co(dot)uk>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-sql(at)postgresql(dot)org
Subject: Re: Help with privilages please
Date: 2006-07-21 12:05:06
Message-ID: 5.1.0.14.0.20060721130134.04304e38@mailserver.dmr.co.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-sql

<html>
Tom<br><br>
Thank you - I think that the underlying problem is that I was trying
out<br><br>
REVOKE ALL FROM TABLE suppliers FOR public;<br><br>
then connect as hilary and I can still see the table rows.<br><br>
I appear to have to revoke each type eg<br>
REVOKE SELECT FROM TABLE suppliers FOR public;<br>
etc and then the code works.<br><br>
Is this a known bug in this version (7.4.1)?<br><br>
Thanks<br>
Hilary<br><br>
<br>
At 18:08 20/07/2006 -0400, Tom Lane wrote:<br><br>
<blockquote type=cite class=cite cite>Hilary Forbes
&lt;hforbes(at)dmr(dot)co(dot)uk&gt; writes:<br>
&gt; I have an existing table suppliers and I have created a new
user<br>
&gt; 'hilary'&lt;br&gt;&lt;br&gt;<br>
&gt; REVOKE ALL on TABLE suppliers FROM hilary;&lt;br&gt;&lt;br&gt;<br>
&gt; now login as hilary&lt;br&gt;<br>
&gt; SELECT * from suppliers;&lt;br&gt;<br>
&gt; and I get all the records!!!&lt;br&gt;&lt;br&gt;<br><br>
Most likely there's been a grant of (at least) select privilege to
PUBLIC.<br>
You'll need to revoke that if you don't want every user to have
that<br>
privilege implicitly.<br><br>
<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab>regards,
tom lane<br><br>
---------------------------(end of
broadcast)---------------------------<br>
TIP 6: explain analyze is your friend</blockquote>
<x-sigsep><p></x-sigsep>
Hilary Forbes<br>
DMR Limited (UK registration 01134804) <br>
A DMR Information and Technology Group company
(<a href="http://www.dmr.co.uk/" eudora="autourl"><font color="#0000FF"><u>www.dmr.co.uk</a></u></font>)
<br>
Direct tel 01689 889950 Fax 01689 860330 <br>
DMR is a UK registered trade mark of DMR Limited<br>
**********************************************************</html>

Attachment Content-Type Size
unknown_filename text/html 1.8 KB

In response to

Responses

Browse pgsql-sql by date

  From Date Subject
Next Message Hilary Forbes 2006-07-21 12:45:16 System catalog table privileges
Previous Message Patrick Jacquot 2006-07-21 09:09:45 Re: simple problem???