Re: 7.3 and user permissions

Chris Hoover <revoohc(at)gmail(dot)com> writes:
> I'm having a strange issue. I just created a new user with createdb
> and createuser permissions. The user only has permissions to view the
> data in one database. However, when I login to any db as him, I am
> able to select data from tables that he has no select permisisons on.

"createuser" actually means "superuser" ... does that make it clearer?

PG 8.1 will have a privilege level that allows creation of users without
full superuserdom, but no existing release does.

> Also, I would really prefer that this user only have access to his one
> db and not able to see anything in the other db's. Is this possible?

Database connection privileges are controlled by pg_hba.conf; you could
adjust that file to allow this user access to only his own database.
Better take away his superuser rights first though, else he could undo
the change if he chose to.

regards, tom lane