Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: michal(dot)seidl(at)gmail(dot)com
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
Date: 2010-11-12 01:38:49
Message-ID: 1289525929.4869.6.camel@jd-desktop
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Fri, 2010-11-12 at 01:34 +0100, Michal Seidl wrote:
> Hello,
> I would like to set up database as private as much as possible. The
> basic problem is that default access for 'PUBLIC' allows any user to get
> information about other existing databases, users, schemas, tables etc.
>
> I think of something like
> REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
> REVOKE ALL ON SCHEMA information_schema FROM PUBLIC
>
> but I am not sure about consequences and I did not find any useful
> information in manual.

That's cause its a bad idea. Try it :D

Joshua D. Drake

>
> Thanks Michal
>

--
PostgreSQL.org Major Contributor
Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579
Consulting, Training, Support, Custom Development, Engineering
http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message mark 2010-11-12 02:31:51 locales and encodings Oh MY!
Previous Message Michal Seidl 2010-11-12 00:34:27 REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC