Thread: BUG #2077: Hiding databases which I am not owner

The following bug has been logged online:

Bug reference:      2077
Logged by:          Martin Pelikan
Email address:      martin.pelikan@gmail.com
PostgreSQL version: 8.0.4
Operating system:   Gentoo Linux 2.6.14-gentoo-r2
Description:        Hiding databases which I am not owner
Details:

We have had on our old server (Debian Sarge) previous version of postgresql
database server (7.4.7) and if I logged in as normal user, I saw only my
database. Now we had to upgrade to gentoo ('cos debian is down) and I
decided to install new pgsql - 8.0.4 and if I log in (psql or phppgadmin), I
see all databases, not only my one.

I think it's a bug because of security - nosey people are everywhere...
And I want not to other people see how many users and databases are here -
server is half-public :)
Thank you for your reply - I found nowhere answer to my question

--- Martin Pelikan <martin.pelikan@gmail.com> escreveu:

> I think it's a bug because of security - nosey people are
> everywhere...
No. It's a feature.

> And I want not to other people see how many users and databases are
> here -
> server is half-public :)
>
See is one thing, access is another thing. We never hid databases and
other catalog objects. Instead we allow and deny access to this
databases. See pg_hba.conf documentation for information.



Euler Taveira de Oliveira
euler[at]yahoo_com_br








_______________________________________________________
Yahoo! doce lar. Faça do Yahoo! sua homepage.
http://br.yahoo.com/homepageset.html