Re: BUG #1497: Default permissions allow any user to create objects in any database

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Barry Brown" <barry(at)cs(dot)sierracollege(dot)edu>
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #1497: Default permissions allow any user to create objects in any database
Date: 2005-02-23 05:48:35
Message-ID: 15851.1109137715@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

"Barry Brown" <barry(at)cs(dot)sierracollege(dot)edu> writes:
> I should not be able to do this.

Not everyone would agree with you. But if you want to work that way,
revoke public CREATE privileges on the public schema, and revoke public
CREATE privileges on the database so people can't create new schemas.

regards, tom lane

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message Valentin Rodionov 2005-02-23 08:51:00 Bizzare initdb failure: "The program "postgres" is needed by initdb"
Previous Message Nicolas Rachinsky 2005-02-22 19:49:05 BUG #1504: Wrong user is used for sequences through rules