From: Joshua D. Drake <jd@commandprompt.com>
To: michal.seidl@gmail.com
Cc: pgsql-admin@postgresql.org
Subject: Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
Date: Thu, 11 Nov 2010 17:38:49 -0800
Message-ID: <1289525929.4869.6.camel@jd-desktop> (raw)
In-Reply-To: <4CDC8B93.7070705@gmail.com>
References: <4CDC8B93.7070705@gmail.com>
On Fri, 2010-11-12 at 01:34 +0100, Michal Seidl wrote:
> Hello,
> I would like to set up database as private as much as possible. The
> basic problem is that default access for 'PUBLIC' allows any user to get
> information about other existing databases, users, schemas, tables etc.
>
> I think of something like
> REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
> REVOKE ALL ON SCHEMA information_schema FROM PUBLIC
>
> but I am not sure about consequences and I did not find any useful
> information in manual.
That's cause its a bad idea. Try it :D
Joshua D. Drake
>
> Thanks Michal
>
--
PostgreSQL.org Major Contributor
Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579
Consulting, Training, Support, Custom Development, Engineering
http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: jd@commandprompt.com, michal.seidl@gmail.com
Subject: Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC
In-Reply-To: <1289525929.4869.6.camel@jd-desktop>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox