Re: Fw: DB and Table Permissions

From: "Dan Wilson" <phpPgAdmin(at)acucore(dot)com>
To: "Andrew McMillan" <Andrew(at)catalyst(dot)net(dot)nz>, <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Fw: DB and Table Permissions
Date: 2000-11-24 17:31:39
Message-ID: 006301c0563c$68cdacf0$078353d8@danwilson
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> > ----- Original Message -----
> > From: "Dan Wilson" <phpPgAdmin(at)acucore(dot)com>
> > To: "pgsql general" <pgsql-general(at)postgresql(dot)org>
> > Sent: Sunday, November 19, 2000 9:33 AM
> > Subject: DB and Table Permissions
> >
> > > Is there a reason why _any_ user can create a table on a database?
Even if
> > > they do not own or have any permissions to it?
> > >
> > > I don't think that should happen. Is there a specific reason why it
does?
>
> Well, you should be able to do "GRANT ..." statements against the pg_...
> tables to control this if you want to.
>
> Cheers,
> Andrew.

Using GRANT and REVOKE statements doesn't help because the permissions are
attached to the table, not the database. So any user can create a new table
within a database even if they are not the owner. I think this needs to be
corrected somehow.
-Dan

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message pejac 2000-11-24 17:45:48 Bug with CREATE TABLE .....
Previous Message Tom Lane 2000-11-24 17:05:04 Re: Bug with CREATE TABLE .....