On 12/10/2015 12:56 PM, oleg yusim wrote:
> 2) Way to ensure that only superuser can run meta commands, such as
> \du, \dp, \z
Those metacommands only exist in the psql command line tool, so to only
restrict access to them, you'd need to modify that tool. however, that
wouldn't stop users from directly querying pg_catalog.
Regular users HAVE to be able to read the pg_catalog metadata, as they
are used by many wrapper libraries such as ORM's to get table
definitions and such. The SQL standard information_schema is
implemented as views of pg_catalog.
--
john r pierce, recycling bits in santa cruz