Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id EC5DA632D1E for ; Wed, 4 Feb 2009 22:01:21 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 03643-01-7 for ; Wed, 4 Feb 2009 22:01:16 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from pooka.fabcat.org (pooka.fabcat.org [114.31.201.3]) by mail.postgresql.org (Postfix) with ESMTP id 184DE632D09 for ; Wed, 4 Feb 2009 22:00:52 -0400 (AST) Received: from localhost (localhost [127.0.0.1]) by pooka.fabcat.org (Postfix) with ESMTP id A8E5C3A8002 for ; Thu, 5 Feb 2009 13:00:48 +1100 (EST) X-Virus-Scanned: Debian amavisd-new at pooka.fabcat.org Received: from pooka.fabcat.org ([127.0.0.1]) by localhost (pooka.fabcat.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQTtMRX8X6zv for ; Thu, 5 Feb 2009 13:00:38 +1100 (EST) Received: by pooka.fabcat.org (Postfix, from userid 1000) id 33BF83A8001; Thu, 5 Feb 2009 13:00:38 +1100 (EST) Date: Thu, 5 Feb 2009 13:00:38 +1100 From: raf To: pgsql-admin@postgresql.org Subject: Re: How to prevent users from creating tables Message-ID: <20090205020037.GA29017@raf.org> Mail-Followup-To: pgsql-admin@postgresql.org References: <20090204005222.GA19588@raf.org> <20090204143740.GA25312@raf.org> <49895663.EE98.0025.0@wicourts.gov> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <49895663.EE98.0025.0@wicourts.gov> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200902/40 X-Sequence-Number: 31261 Kevin Grittner wrote: > >>> raf wrote: > > revoke all privileges on schema public from public; > > revoke all privileges on schema public from staff; -- staff is a role > > > > then i get two warnings: > > > > WARNING: no privileges could be revoked for "public" > > WARNING: no privileges could be revoked for "public" > > > > and a member of the staff role can still create tables. > > if i replace "all privileges" with just "create", i > > get the same warnings and still no effect. > > Are you logged in as a database superuser? > > (Database owner is not good enough for this operation.) > > -Kevin i wasn't logged in as the superuser. thanks. it's good now. cheers, raf