Re: Revoking usage of pg_catalog

From: Scott Marlowe <smarlowe(at)g2switchworks(dot)com>
To: Daniel Cristian Cruz <danielcristian(at)gmail(dot)com>
Cc: pgsql-admin <pgsql-admin(at)postgresql(dot)org>
Subject: Re: Revoking usage of pg_catalog
Date: 2007-05-09 17:52:59
Message-ID: 1178733179.7497.54.camel@state.g2switchworks.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Wed, 2007-05-09 at 08:05, Daniel Cristian Cruz wrote:
> Hi there!
>
> Is it possible to revoke usage of pg_catalog for a specific user?
>
> The reason is to secure PostgreSQL. If a user can connect to a
> database, it could query pg_class, pg_attribute, pg_proc search for
> specific tables and if using dblink, even database passwords...

That's not security, it's obscurity.

You can grant / revoke access to anything a user should or should not be
able to access anyway.

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Daniel Cristian Cruz 2007-05-09 18:09:41 Re: Revoking usage of pg_catalog
Previous Message Tom Lane 2007-05-09 14:52:18 Re: Revoking usage of pg_catalog