Re: USAGE on schema allowed by default? - Mailing list pgsql-general

From Tom Lane
Subject Re: USAGE on schema allowed by default?
Date
Msg-id 15242.1038716083@sss.pgh.pa.us
Whole thread Raw
In response to Re: USAGE on schema allowed by default?  (Jochem van Dieten <jochemd@oli.tudelft.nl>)
List pgsql-general
Jochem van Dieten <jochemd@oli.tudelft.nl> writes:
> Tom Lane wrote:
>> This has nothing to do with USAGE on the schema; it is just a matter of
>> being able to read the system catalogs.

> <quote>
> By default, users cannot see the objects in schemas they do not own.
> </quote>

Perhaps "access" would be a better verb than "see" here.  You cannot
actually *do* anything with objects that live in a schema you don't
have USAGE on.  (If you find any holes in that statement, let me know.)
You can, however, find out their names and other properties by examining
the system catalogs.

I agree that this isn't completely ideal, but I stand by my comment that
it's not worth breaking every client that looks at system catalogs in
order to prevent it.

            regards, tom lane

pgsql-general by date:

Previous
From: "Nicolai Tufar"
Date:
Subject: Segmentation fault while COPY in 7.3
Next
From: Nicolai Tufar
Date:
Subject: Re: Segmentation fault while COPY in 7.3