Thread: privilege & user

Hi,

Here is my test, I think the privilege should be revoked automatically.

Otherwise, it is a dangerous thing:

bash-2.05b$ createdb dod

CREATE DATABASE

bash-2.05b$ psql dod

Welcome to psql 8.0.3, the PostgreSQL interactive terminal.

Type:  \copyright for distribution terms

       \h for help with SQL commands

       \? for help with psql commands

       \g or terminate with semicolon to execute query

       \q to quit

dod=# create user secretary_dod;

CREATE USER

dod=# create table terror (c1 int);

CREATE TABLE

dod=# grant select on terror to secretary_dod;

GRANT

dod=# \z terror

                      Access privileges for database "dod"

 Schema |  Name  | Type  |                  Access privileges

--------+--------+-------+------------------------------------------------------

 public | terror | table | {postgres=arwdRxt/postgres,secretary_dod=r/postgres}

(1 row)

dod=# drop user secretary_dod;

DROP USER

dod=# \z terror

                 Access privileges for database "dod"

 Schema |  Name  | Type  |             Access privileges

--------+--------+-------+--------------------------------------------

 public | terror | table | {postgres=arwdRxt/postgres,103=r/postgres}

(1 row)

dod=# create user a_staff SYSID 103;

CREATE USER

dod=# \c - a_staff

You are now connected as new user "a_staff".

dod=> select * from terror;

c1

----

(0 rows)

*** WOW!, A_staff can what the Secretary of Dept of Defense could see ***