Re: Restrict users from describing table

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Michael Gill <mgill(at)pointdx(dot)com>
Cc: Andrew Dunstan <andrew(at)dunslane(dot)net>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Restrict users from describing table
Date: 2004-01-09 04:10:35
Message-ID: 20040109041035.GA31586@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Jan 05, 2004 at 11:32:42 +0500,
Michael Gill <mgill(at)pointdx(dot)com> wrote:
>
> I think I have found the simple solution by separating the user from the
> owner of the tables, however!
>
> I have simply created tables and functions in the owner's schema(A),
> then granted execution to the other user(B). My brief testing indicates
> that B cannot access or describe A's objects, yet can execute the
> function that retrieves data and returns a ref cursor.
>

This won't work as they can still get at the system catalog which will
allow them to see the schema.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2004-01-09 05:56:23 Re: How to retrieve functional index column names
Previous Message Rod Taylor 2004-01-09 03:27:28 Re: psql \d option list overloaded