Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC - Mailing list pgsql-admin

From Joshua D. Drake
Subject Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
Date
Msg-id 1289525929.4869.6.camel@jd-desktop
Whole thread Raw
In response to REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC  (Michal Seidl <michal.seidl@gmail.com>)
List pgsql-admin
On Fri, 2010-11-12 at 01:34 +0100, Michal Seidl wrote:
> Hello,
> I would like to set up database as private as much as possible. The
> basic problem is that default access for 'PUBLIC' allows any user to get
> information about other existing databases, users, schemas, tables etc.
>
> I think of something like
> REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
> REVOKE ALL ON SCHEMA information_schema FROM PUBLIC
>
> but I am not sure about consequences and I did not find any useful
> information in manual.

That's cause its a bad idea. Try it :D


Joshua D. Drake

>
> Thanks Michal
>

--
PostgreSQL.org Major Contributor
Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579
Consulting, Training, Support, Custom Development, Engineering
http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt


pgsql-admin by date:

Previous
From: Michal Seidl
Date:
Subject: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
Next
From: "mark"
Date:
Subject: locales and encodings Oh MY!