Tom
Thank you - I think that the underlying problem is that I was trying
out
REVOKE ALL FROM TABLE suppliers FOR public;
then connect as hilary and I can still see the table rows.
I appear to have to revoke each type eg
REVOKE SELECT FROM TABLE suppliers FOR public;
etc and then the code works.
Is this a known bug in this version (7.4.1)?
Thanks
Hilary
At 18:08 20/07/2006 -0400, Tom Lane wrote:
Hilary Forbes
<hforbes@dmr.co.uk> writes:
> I have an existing table suppliers and I have created a new
user
> 'hilary'<br><br>
> REVOKE ALL on TABLE suppliers FROM hilary;<br><br>
> now login as hilary<br>
> SELECT * from suppliers;<br>
> and I get all the records!!!<br><br>
Most likely there's been a grant of (at least) select privilege to
PUBLIC.
You'll need to revoke that if you don't want every user to have
that
privilege implicitly.
regards,
tom lane
---------------------------(end of
broadcast)---------------------------
TIP 6: explain analyze is your friend
Hilary Forbes
DMR Limited (UK registration 01134804)
A DMR Information and Technology Group company
(www.dmr.co.uk)
Direct tel 01689 889950 Fax 01689 860330
DMR is a UK registered trade mark of DMR Limited
**********************************************************