Daniel Rubio <drubior@tinet.org> writes:
> I'm mantaining a Postgres installation on an ISP, and I see a relativly
> important security issue.
> I can connect to postgres with a normal user login and take a look to
> the database structure of all the other databases on the installation.
That is correct; we do not consider it a security problem. If you don't
want a user to be able to look at the system catalogs of a database, you
need to disallow him from connecting to that database at all. (See
pg_hba.conf for this, not GRANT/REVOKE.)
regards, tom lane
