Re: Security Question - Mailing list pgsql-general

From Tom Lane
Subject Re: Security Question
Date
Msg-id 942.1043972492@sss.pgh.pa.us
Whole thread Raw
In response to Security Question  (Mitch <postgresql@karboneye.com>)
List pgsql-general
Mitch <postgresql@karboneye.com> writes:
> Is there any way to prevent a regular user (not super, no createdb)
> from being able to select from pg_user and pg_database to get a list of
> databases, users and table schemas on the machine?

Well, you could alter the permissions on the system catalogs, but
I suspect you'll find you do not like the side-effects.  A lot of stuff
is likely to break if it can't see the catalogs.

            regards, tom lane

pgsql-general by date:

Previous
From: Arjen van der Meijden
Date:
Subject: Weird query plans for my queries, causing terrible performance.
Next
From: Tom Lane
Date:
Subject: Re: Weird query plans for my queries, causing terrible performance.