partially effective revoke on pg_catalog - Mailing list pgsql-bugs

From hubert depesz lubaczewski
Subject partially effective revoke on pg_catalog
Date
Msg-id 20070910122454.GA10364@depesz.com
Whole thread Raw
Responses Re: partially effective revoke on pg_catalog  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-bugs
user depesz is superuser. i connect to depesz database, and:

(depesz@[local]:5830) 14:20:34 [depesz]
# revoke usage on schema pg_catalog from public;
REVOKE

now, i reconnect to the same database with test user (which is not
superuser):

(test@[local]:5830) 14:23:55 [depesz]
> \d
ERROR:  permission denied for schema pg_catalog
(test@[local]:5830) 14:23:57 [depesz]
> select count(*) from pg_tables;
 count
-------
    48
(1 row)

(test@[local]:5830) 14:23:59 [depesz]
> select count(*) from pg_catalog.pg_tables;
ERROR:  permission denied for schema pg_catalog

something looks weird here.

search_path is default:

(test@[local]:5830) 14:24:03 [depesz]
> show search_path;
  search_path
----------------
 "$user",public
(1 row)

pg version - 8.3devel from cvs.

depesz

--
quicksil1er: "postgres is excellent, but like any DB it requires a
highly paid DBA.  here's my CV!" :)
http://www.depesz.com/ - blog dla ciebie (i moje CV)

pgsql-bugs by date:

Previous
From: Dave Page
Date:
Subject: Re: BUG #3605: impossible loading
Next
From: Tom Lane
Date:
Subject: Re: partially effective revoke on pg_catalog