Re: Permisson Required

From: Ron Johnson <ronljohnsonjr(at)gmail(dot)com>
To: Pgsql-admin <pgsql-admin(at)lists(dot)postgresql(dot)org>
Subject: Re: Permisson Required
Date: 2025-03-27 21:45:12
Message-ID: CANzqJaDxVXk=FGghQn0n9_-CzacYf=_aCsyqu0hrQ0uPSv0SoA@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-admin

I'm not really sure you can hide *the existence* of an object from a
determined client application. After all, they live in pg_class, and every
connection *must* read pg_class (and pg_namespace, pg_aatribute,
pg_attrdef, pg_index, etc, etc) to be able to know how to translate table
names and column names to oid values.

Having said that, I do not know how the PgAdmin *GUI* treats schemata and
tables that the connected role does not have access to.

But even if the GUI sidebar hides objects the user does not have permission
to access, the user should be able to directly query pg_namespace,
pg_class, etc to learn the existence of tables, and their structures *IF*
the user is technically savvy enough to use Google., read the docs and
StackEExchange.

On Thu, Mar 27, 2025 at 2:43 PM ROHIT SACHDEVA <sachdeva(dot)rohit648(at)gmail(dot)com>
wrote:

> database users that will be connecting the database via pgadmin tool.
>
> Is that possible as do we not want the other tables/schemas to be exposed
> to that database users.
>
> On Thu, Mar 27, 2025 at 11:14 PM Ron Johnson <ronljohnsonjr(at)gmail(dot)com>
> wrote:
>
>> Hidden in what way? What application(s) are the end users using?
>>
>> On Thu, Mar 27, 2025 at 12:17 PM ROHIT SACHDEVA <
>> sachdeva(dot)rohit648(at)gmail(dot)com> wrote:
>>
>>> Hi David
>>>
>>> Hide means only that table will be visible where I will give select
>>> access.
>>>
>>> On Thu, 27 Mar, 2025, 9:44 pm David G. Johnston, <
>>> david(dot)g(dot)johnston(at)gmail(dot)com> wrote:
>>>
>>>> On Thu, Mar 27, 2025 at 9:10 AM ROHIT SACHDEVA <
>>>> sachdeva(dot)rohit648(at)gmail(dot)com> wrote:
>>>>
>>>>> Hi Team,
>>>>>
>>>>> There is a requirement of giving select access on few tables and hide
>>>>> other tables in a database of postgres 14 in RDS.
>>>>>
>>>>> On Thu, 16 May, 2024, 5:31 pm Siraj G, <tosiraj(dot)g(at)gmail(dot)com> wrote:
>>>>>
>>>>>> Hello -
>>>>>>
>>>>>> Queries in replica instance are failing with the error
>>>>>> "cancelling statement due to conflict with recovery". I was checking two
>>>>>> parameters (max_standby_archive_delay and
>>>>>> max_standby_streaming_delay) which may allow the queries to run
>>>>>> within the time defined in those.
>>>>>>
>>>>>>
>>>> It is very bad list etiquette to reply to an email thread with an
>>>> entirely new subject. Just send a new email to the list. You should
>>>> include what you mean by "hide" when you do so.
>>>>
>>>> David J.
>>>>
>>>>
--
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Gurjeet Singh 2025-03-29 03:25:08 Re: Failover and vacuum
Previous Message ROHIT SACHDEVA 2025-03-27 18:43:16 Re: Permisson Required