Joe Maldonado <jmaldonado@webehosting.biz> writes:
> But when I issue a REVOKE CREATE ON DATABASE mydb FROM myuser;
> The user can still create tables...
CREATE privilege on a database concerns the right to create schemas
within the database. Whether you can create tables within a schema
is a different privilege on a different object. In particular, the
default setup is that everyone can create tables within the "public"
schema in each database. Revoke CREATE on that (from PUBLIC, not just
myuser) and you'll start to get somewhere.
regards, tom lane
