privilege & user

From: "Lee Wu" <Lwu(at)mxlogic(dot)com>
To: <pgsql-admin(at)postgresql(dot)org>
Subject: privilege & user
Date: 2005-07-11 20:20:52
Message-ID: E1F0E4D89D8FA44789DFC065C8E755281A3672@mxlhq-exch01.corp.mxlogic.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi,

Here is my test, I think the privilege should be revoked automatically.

Otherwise, it is a dangerous thing:

bash-2.05b$ createdb dod

CREATE DATABASE

bash-2.05b$ psql dod

Welcome to psql 8.0.3, the PostgreSQL interactive terminal.

Type: \copyright for distribution terms

\h for help with SQL commands

\? for help with psql commands

\g or terminate with semicolon to execute query

\q to quit

dod=# create user secretary_dod;

CREATE USER

dod=# create table terror (c1 int);

CREATE TABLE

dod=# grant select on terror to secretary_dod;

GRANT

dod=# \z terror

Access privileges for database "dod"

Schema | Name | Type | Access privileges

--------+--------+-------+----------------------------------------------
--------

public | terror | table |
{postgres=arwdRxt/postgres,secretary_dod=r/postgres}

(1 row)

dod=# drop user secretary_dod;

DROP USER

dod=# \z terror

Access privileges for database "dod"

Schema | Name | Type | Access privileges

--------+--------+-------+--------------------------------------------

public | terror | table | {postgres=arwdRxt/postgres,103=r/postgres}

(1 row)

dod=# create user a_staff SYSID 103;

CREATE USER

dod=# \c - a_staff

You are now connected as new user "a_staff".

dod=> select * from terror;

c1

----

(0 rows)

*** WOW!, A_staff can what the Secretary of Dept of Defense could see
***

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Alvaro Herrera 2005-07-11 20:33:26 Re: privilege & user
Previous Message dfrench 2005-07-11 20:05:56 Import Oracle to Postgres