Re: Making a schema "read-only" (was Unexpected message in grant/revoke script)

From: "Webb Sprague" <webb(dot)sprague(at)gmail(dot)com>
To:
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Making a schema "read-only" (was Unexpected message in grant/revoke script)
Date: 2008-03-14 20:08:28
Message-ID: b11ea23c0803141308qee254d4p69603a411691263a@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Fri, Mar 14, 2008 at 12:55 PM, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> "Webb Sprague" <webb(dot)sprague(at)gmail(dot)com> writes:
> > Also, I revoked what I thought was everything possible on the public
> > schema, but a user is still able to create a table in that schema --
> > could someone explain:
>
> > oregon=# revoke create on schema public from foobar cascade;
> > REVOKE
>
> You've got a conceptual error here:

Not surprising...

<SNIP>

> Start with
> revoke all on schema public from public
> and then grant only what you want.

I will give it a go, and thanks!

>
> regards, tom lane
>

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Dave Page 2008-03-14 20:08:48 Re: postgre vs MySQL
Previous Message Tom Lane 2008-03-14 19:55:09 Re: Making a schema "read-only" (was Unexpected message in grant/revoke script)