partially effective revoke on pg_catalog

From: hubert depesz lubaczewski <depesz(at)depesz(dot)com>
To: pgsql-bugs(at)postgresql(dot)org
Subject: partially effective revoke on pg_catalog
Date: 2007-09-10 12:24:54
Message-ID: 20070910122454.GA10364@depesz.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

user depesz is superuser. i connect to depesz database, and:

(depesz(at)[local]:5830) 14:20:34 [depesz]
# revoke usage on schema pg_catalog from public;
REVOKE

now, i reconnect to the same database with test user (which is not
superuser):

(test(at)[local]:5830) 14:23:55 [depesz]
> \d
ERROR: permission denied for schema pg_catalog
(test(at)[local]:5830) 14:23:57 [depesz]
> select count(*) from pg_tables;
count
-------
48
(1 row)

(test(at)[local]:5830) 14:23:59 [depesz]
> select count(*) from pg_catalog.pg_tables;
ERROR: permission denied for schema pg_catalog

something looks weird here.

search_path is default:

(test(at)[local]:5830) 14:24:03 [depesz]
> show search_path;
search_path
----------------
"$user",public
(1 row)

pg version - 8.3devel from cvs.

depesz

--
quicksil1er: "postgres is excellent, but like any DB it requires a
highly paid DBA. here's my CV!" :)
http://www.depesz.com/ - blog dla ciebie (i moje CV)

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2007-09-10 14:38:34 Re: partially effective revoke on pg_catalog
Previous Message Dave Page 2007-09-10 07:38:34 Re: BUG #3605: impossible loading