Thread: REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

From
pgsql-bugs@postgresql.org
Date:
Jean-Francois Leveque (leveque@webmails.com) reports a bug with a severity of 2
The lower the number the more severe it is.

Short Description
REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

Long Description
System: SuSE 7.0
PostgreSQL RPM: postgres-7.0.2-29
select version(); :
PostgreSQL 7.0.2 on i686-pc-linux-gnu, compiled by gcc 2.95.2

When I revoke select from a user, it revokes select from other
users, database object owner included.


Sample Code
test:~ > createdb bugcheck
CREATE DATABASE
test:~ > psql bugcheck
Welcome to psql, the PostgreSQL interactive terminal.

Type:  \copyright for distribution terms
       \h for help with SQL commands
       \? for help on internal slash commands
       \g or terminate with semicolon to execute query
       \q to quit

bugcheck=> CREATE TABLE bugtable (
bugcheck(> bugcolumn int);
CREATE
bugcheck=> select * from bugtable;
 bugcolumn
-----------
(0 rows)

bugcheck=> REVOKE SELECT ON bugtable FROM nobody;
CHANGE
bugcheck=> select * from bugtable;
ERROR:  bugtable: Permission denied.


No file was uploaded with this report

Re: REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

From
Tom Lane
Date:
pgsql-bugs@postgresql.org writes:
> When I revoke select from a user, it revokes select from other
> users, database object owner included.

No, only from the owner.  Update to 7.1.

            regards, tom lane