From: | "Dan Wilson" <phpPgAdmin(at)acucore(dot)com> |
---|---|
To: | "Andrew McMillan" <Andrew(at)catalyst(dot)net(dot)nz>, <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: Fw: DB and Table Permissions |
Date: | 2000-11-24 17:31:39 |
Message-ID: | 006301c0563c$68cdacf0$078353d8@danwilson |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
> > ----- Original Message -----
> > From: "Dan Wilson" <phpPgAdmin(at)acucore(dot)com>
> > To: "pgsql general" <pgsql-general(at)postgresql(dot)org>
> > Sent: Sunday, November 19, 2000 9:33 AM
> > Subject: DB and Table Permissions
> >
> > > Is there a reason why _any_ user can create a table on a database?
Even if
> > > they do not own or have any permissions to it?
> > >
> > > I don't think that should happen. Is there a specific reason why it
does?
>
> Well, you should be able to do "GRANT ..." statements against the pg_...
> tables to control this if you want to.
>
> Cheers,
> Andrew.
Using GRANT and REVOKE statements doesn't help because the permissions are
attached to the table, not the database. So any user can create a new table
within a database even if they are not the owner. I think this needs to be
corrected somehow.
-Dan
From | Date | Subject | |
---|---|---|---|
Next Message | pejac | 2000-11-24 17:45:48 | Bug with CREATE TABLE ..... |
Previous Message | Tom Lane | 2000-11-24 17:05:04 | Re: Bug with CREATE TABLE ..... |