pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Achilleas Mantzios <achill@matrix.gatewaynet.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: How to revoke "Create Privilege" from a readonly user in postgres?
Date: Mon, 5 Nov 2018 14:32:35 +0200
Message-ID: <06ca3880-b33d-35d7-f040-61dbfb8c20ab@matrix.gatewaynet.com> (raw)
In-Reply-To: <1541419964128-0.post@n3.nabble.com>
References: <1541419964128-0.post@n3.nabble.com>

On 5/11/18 2:12 μ.μ., pavan95 wrote:
> Hi,
>
> I want to know if there is anyway to disallow a user from creating his own
> tables.
> He should be only provided with the "SELECT" access apart from that no other
> access should be available with him.
>
> I have created a user "readonly" with no other privilege other select on
> database "abc". But when I tried to connect as "readonly" he is given with
> "SELECT" privilege but the problem here is he was also be able to create his
> own tables in the database.

Check out privileges you have given to PUBLIC. Those hold still for all future users.

>
> How this can be stopped? Looking forward to hear from you.
>
> Regards,
> Pavan
>
>
>
> --
> Sent from: http://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html
>


-- 
Achilleas Mantzios
IT DEV Lead
IT DEPT
Dynacom Tankers Mgmt





view thread (9+ messages)  latest in thread

Message-ID: <06ca3880-b33d-35d7-f040-61dbfb8c20ab@matrix.gatewaynet.com>
Permalink:  ../06ca3880-b33d-35d7-f040-61dbfb8c20ab@matrix.gatewaynet.com/
Also on:    postgresql.org/message-id/06ca3880-b33d-35d7-f040-61dbfb8c20ab@matrix.gatewaynet.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: achill@matrix.gatewaynet.com, pgsql-admin@lists.postgresql.org
  Subject: Re: How to revoke "Create Privilege" from a readonly user in postgres?
  In-Reply-To: <06ca3880-b33d-35d7-f040-61dbfb8c20ab@matrix.gatewaynet.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox