7.4.1 is quite old and has a number of serious known bugs. I'd suggest
you either upgrade to 8.1.4 (current) or, if you can't do that, at
least upgrade to 7.4.13 (latest 7.4) immediately.
Hilary Forbes wrote:
> Tom
>
> Thank you - I think that the underlying problem is that I was trying out
>
> REVOKE ALL FROM TABLE suppliers FOR public;
>
> then connect as hilary and I can still see the table rows.
>
> I appear to have to revoke each type eg
> REVOKE SELECT FROM TABLE suppliers FOR public;
> etc and then the code works.
>
> Is this a known bug in this version (7.4.1)?
>
> Thanks
> Hilary
>
>
> At 18:08 20/07/2006 -0400, Tom Lane wrote:
>
> Hilary Forbes <hforbes@dmr.co.uk> writes:
> > I have an existing table suppliers and I have created a new user
> > 'hilary'<br><br>
> > REVOKE ALL on TABLE suppliers FROM hilary;<br><br>
> > now login as hilary<br>
> > SELECT * from suppliers;<br>
> > and I get all the records!!!<br><br>
>
> Most likely there's been a grant of (at least) select privilege to PUBLIC.
> You'll need to revoke that if you don't want every user to have that
> privilege implicitly.
>
> regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 6: explain analyze is your friend
>
> Hilary Forbes
> DMR Limited (UK registration 01134804)
> A DMR Information and Technology Group company (_www.dmr.co.uk_)
> Direct tel 01689 889950 Fax 01689 860330
> DMR is a UK registered trade mark of DMR Limited
> **********************************************************
