Re: question/problem concerning GRANT/REVOKE - Mailing list pgsql-general

From Scott Marlowe
Subject Re: question/problem concerning GRANT/REVOKE
Date
Msg-id dcc563d10804301228w24ef2ee3u3af4c18a47d077a7@mail.gmail.com
Whole thread Raw
In response to question/problem concerning GRANT/REVOKE  (Gerhard Wohlgenannt <wohlg@ai.wu-wien.ac.at>)
List pgsql-general
On Tue, Apr 29, 2008 at 2:46 AM, Gerhard Wohlgenannt
<wohlg@ai.wu-wien.ac.at> wrote:
> hi!
>
>  I have a pretty basic problem: We have several schemas in one of our
> databases, and we need the users to see only the tables (and table
> structure) of tables inside their own schema.  So I created schemas for
> those users, and set their "search_path".
>
>  But with \d public.<tab key> users can see all tables (and their structure)
> in the public (and other) schemas -- and I found no way yet to prevent
> this??
>  I have tried "REVOKE ALL" from the database itself, and the other schemas,
> and single tables -- for the specific user, and also for the user "PUBLIC"
> -- but it had no effect!
>  How can I prevent exposing the structure of all tables in the database to
> user that should work in their SCHEMA?
>
>  Help would be appreciated very much!! :-)

This is a semi frequently asked question.  There's no mechanism built
into pgsql that allows you to hide other schemas and objects this way.

Note that if you have the proper security setup, all they can do is
see that the other tables are there.

pgsql-general by date:

Previous
From: Benoît Carpentier
Date:
Subject: Benetl 1.8, free ETL tool using postgreSQL is out !!!
Next
From: "Bayless Kirtley"
Date:
Subject: Closed ResultSet error