documentation — version switch

I want to congratulate whoever came up with the idea for the version switch in the documentation!

I am still furious about Google still "finding" and displaying on top the documentation of 7.x long after 8.x was out… ;)
>From pgsql-general-owner(at)postgresql(dot)org Thu Aug 9 14:54:39 2012
Received: from magus.postgresql.org (magus.postgresql.org [87.238.57.229])
by mail.postgresql.org (Postfix) with ESMTP id 96F8B18CB323
for <pgsql-general(at)postgresql(dot)org>; Thu, 9 Aug 2012 14:54:36 -0300 (ADT)
Received: from mail-vb0-f46.google.com ([209.85.212.46])
by magus.postgresql.org with esmtp (Exim 4.72)
(envelope-from <moshe(at)neadwerx(dot)com>)
id 1SzWwL-0000Vo-DG
for pgsql-general(at)postgresql(dot)org; Thu, 09 Aug 2012 17:54:35 +0000
Received: by vbbff1 with SMTP id ff1so233623vbb.19
for <pgsql-general(at)postgresql(dot)org>; Thu, 09 Aug 2012 10:54:20 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s 120113;
h=mime-version:from:date:message-id:subject:to:content-type
:x-gm-message-state;
bh=pJNcoWkCbkA9A03v6QP5WBQ/xHbcGiiB5e5aEx+zyeY=;
b=GzwBsC4JlcKrJXvNrlyOSkZ0Qs6y6VpV+DGbZOuJBFfqcrcgYlH0fWz8MabQe/UIaF
7a76TQ6VapPzhwBchyfdAeCYIkGd3MODwlhydTgokOLdc8sQziTiy50mpYfJmrD0oEGK
8WSZBbdaS+kYdc0JbKnXjKqbYSZrEKSrKfrokI3kCDpwKs50QODIGr3Scq2tn4CliHR8
xv0g4uWymGWP0g0BgW+gOLLAA/JEzc8rShO9HWimm837P7QNbcrC7RONA6yWOTD4UOzV
IRSpgzc5dthndywenGJwOnAZXVCrxSmJ+CqRWWiNHtdKtsXJX57UvgcfPlWNmKOPjUyw
V0jg=
Received: by 10.52.36.180 with SMTP id r20mr152316vdj.15.1344534859892; Thu,
09 Aug 2012 10:54:19 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.220.117.15 with HTTP; Thu, 9 Aug 2012 10:53:59 -0700 (PDT)
From: Moshe Jacobson <moshe(at)neadwerx(dot)com>
Date: Thu, 9 Aug 2012 13:53:59 -0400
Message-ID: <CAJ4CxL=JONoUcDzdChbwXXDJJ1s_MqF36d_onL1SSUcK6ubffQ(at)mail(dot)gmail(dot)com>
Subject: Revoking table & function creation privileges
To: pgsql-general(at)postgresql(dot)org
Content-Type: multipart/alternative; boundary cf307c9e0ab6467304c6d8eab9
X-Gm-Message-State: ALoCoQl8V0Se3vwbmCI62uLInT5ptY5gUIAIIepUZX00Kfod4b1xP5mKk/SypJSJYHcb9Gkyg/x+
X-Pg-Spam-Score: -1.6 (-)
X-Archive-Number: 201208/195
X-Sequence-Number: 189372

--20cf307c9e0ab6467304c6d8eab9
Content-Type: text/plain; charset=ISO-8859-1

I posted this in Devshed forums
(here<http://forums.devshed.com/postgresql-help-21/revoking-table-create-privileges-926853.html>)
but no one seems to be responding. Hopefully someone here can help.

How do I keep a user from being able to create tables in the public schema?

I have tried REVOKE CREATE FROM username ON SCHEMA PUBLIC but they can
still create tables.
The user has no special attributes and is not a member of another role.

mjacobson(at)zeus=>[local]:ises=> \dn+ public
List of schemas
Name | Owner | Access privileges | Description
--------+----------+----------------------+------------------------
public | postgres | postgres=UC/postgres+| standard public schema
| | =UC/postgres +|
| | webuser=U/postgres |
(1 row)

mjacobson(at)zeus=>[local]:ises=> select current_user;
current_user
--------------
mjacobson
(1 row)

mjacobson(at)zeus=>[local]:ises=> \du+ mjacobson
List of roles
Role name | Attributes | Member of | Description
-----------+------------+-----------+-------------
mjacobson | | {} |

mjacobson(at)zeus=>[local]:ises=> create table tb_foo(i int);
CREATE TABLE
mjacobson(at)zeus=>[local]:ises=> drop table tb_foo;
DROP TABLE

--
Moshe Jacobson
Nead Werx, Inc. | Senior Systems Engineer
2323 Cumberland Parkway, Suite 201 | Atlanta, GA 30339
moshe(at)neadwerx(dot)com | www.neadwerx.com

--20cf307c9e0ab6467304c6d8eab9
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I posted this in Devshed forums (<a href="http://forums.devshed.com/postgresql-help-21/revoking-table-create-privileges-926853.html">here</a>) but no one seems to be responding. Hopefully someone here can help.<div><br></div>

<div><div>How do I keep a user from being able to create tables in the public schema?</div><div><br></div><div>I have tried <font face="courier new, monospace">REVOKE CREATE FROM username ON SCHEMA PUBLIC</font> but they can still create tables.</div>

<div>The user has no special attributes and is not a member of another role.</div><div><br></div></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><div><font face="courier new, monospace">mjacobson(at)zeus=&gt;[local]:ises=&gt; \dn+ public</font></div>

</div><div><div><font face="courier new, monospace">                          List of schemas</font></div></div><div><div><font face="courier new, monospace">  Name  |  Owner   |  Access privileges   |      Description</font></div>

</div><div><div><font face="courier new, monospace">--------+----------+----------------------+------------------------</font></div></div><div><div><font face="courier new, monospace"> public | postgres | postgres=UC/postgres+| standard public schema</font></div>

</div><div><div><font face="courier new, monospace">        |          | =UC/postgres        +|</font></div></div><div><div><font face="courier new, monospace">        |          | webuser=U/postgres   |</font></div></div>

<div><div><font face="courier new, monospace">(1 row)</font></div></div><div><div><font face="courier new, monospace"><br></font></div></div><div><div><font face="courier new, monospace">mjacobson(at)zeus=&gt;[local]:ises=&gt; select current_user;</font></div>

</div><div><div><font face="courier new, monospace"> current_user</font></div></div><div><div><font face="courier new, monospace">--------------</font></div></div><div><div><font face="courier new, monospace"> mjacobson</font></div>

</div><div><div><font face="courier new, monospace">(1 row)</font></div></div><div><div><font face="courier new, monospace"><br></font></div></div><div><div><font face="courier new, monospace">mjacobson(at)zeus=&gt;[local]:ises=&gt; \du+ mjacobson</font></div>

</div><div><div><font face="courier new, monospace">                  List of roles</font></div></div><div><div><font face="courier new, monospace"> Role name | Attributes | Member of | Description</font></div></div><div>

<div><font face="courier new, monospace">-----------+------------+-----------+-------------</font></div></div><div><div><font face="courier new, monospace"> mjacobson |            | {}        |</font></div></div><div><div>

<font face="courier new, monospace"><br></font></div></div><div><div><font face="courier new, monospace">mjacobson(at)zeus=&gt;[local]:ises=&gt; create table tb_foo(i int);</font></div></div><div><div><font face="courier new, monospace">CREATE TABLE</font></div>

</div><div><div><font face="courier new, monospace">mjacobson(at)zeus=&gt;[local]:ises=&gt; drop table tb_foo;</font></div></div><div><div><font face="courier new, monospace">DROP TABLE</font></div></div></blockquote><div><div>

<br></div>-- <br><div><span style="border-collapse:collapse"><font face="&#39;times new roman&#39;, serif"><div><span style="border-collapse:collapse"><font><font>Moshe Jacobson<br></font></font>Nead Werx, Inc. <font>| Senior Systems Engineer</font></span></div>

<div><span style="border-collapse:collapse"><font>2323 Cumberland Parkway, Suite 201 | Atlanta, GA 30339<br></font><font><a href="mailto:moshe(at)neadwerx(dot)com" target="_blank">moshe(at)neadwerx(dot)com</a> | </font></span><font><a href="http://www.neadwerx.com/" target="_blank">www.neadwerx.com</a></font></div>

</font></span></div><br>
</div>

--20cf307c9e0ab6467304c6d8eab9--