On Tue, Jul 1, 2014 at 6:13 PM, Kynn Jones <kynnjo@gmail.com> wrote:
> Actually, AFAICT, revoking usage on the schemas you listed seems to have no
> effect at all on the "minimal role"'s ability to use \l, \d, \dt, etc.
>
> In particular, the minimal role still has access to the shell through \!.
> YIKES!!!
Without seeing your actual commands, it's difficult to know about the
schema stuff, but one thing for sure, \! has nothing to do with
databases permissions, it is related to local process permisions (
database is not contacted, it is a local shell access ), you have to
restrict it with whichever tools your operating system has.
It seems you are confussing the postgresql database with psql, which
is just a C program linked with the libpq library to access a
postgresql database server. You can easily rewrite it in, say, java
using jdbc, or, if you read enough docs, in any language which allows
socket access.
Database permissions will apply to any of them.
Francisco Olarte.
