pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedschema postgresql
4+ messages / 4 participants
[nested] [flat]
* schema postgresql
@ 2020-09-11 21:13 Henry Francisco Garcia Cortez <garcortez@gmail.com>
2020-09-12 06:06 ` Re: schema postgresql Paul Förster <paul.foerster@gmail.com>
2020-09-12 23:36 ` Re: schema postgresql Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 2 replies; 4+ messages in thread
From: Henry Francisco Garcia Cortez @ 2020-09-11 21:13 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
how to restrict a user from seeing a schema in postgresql
--
Ing. Henry G. Cortez
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: schema postgresql
2020-09-11 21:13 schema postgresql Henry Francisco Garcia Cortez <garcortez@gmail.com>
@ 2020-09-12 06:06 ` Paul Förster <paul.foerster@gmail.com>
1 sibling, 0 replies; 4+ messages in thread
From: Paul Förster @ 2020-09-12 06:06 UTC (permalink / raw)
To: Henry Francisco Garcia Cortez <garcortez@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org
Hi Henry,
> On 11. Sep, 2020, at 23:13, Henry Francisco Garcia Cortez <garcortez@gmail.com> wrote:
>
> how to restrict a user from seeing a schema in postgresql
for example:
revoke all privileges on <schema> from <user>;
See:
https://www.postgresql.org/docs/current/sql-revoke.html
Cheers,
Paul
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: schema postgresql
2020-09-11 21:13 schema postgresql Henry Francisco Garcia Cortez <garcortez@gmail.com>
@ 2020-09-12 23:36 ` Laurenz Albe <laurenz.albe@cybertec.at>
2020-09-14 14:13 ` Re: schema postgresql Stephen Frost <sfrost@snowman.net>
1 sibling, 1 reply; 4+ messages in thread
From: Laurenz Albe @ 2020-09-12 23:36 UTC (permalink / raw)
To: Henry Francisco Garcia Cortez <garcortez@gmail.com>; pgsql-admin@lists.postgresql.org
On Fri, 2020-09-11 at 15:13 -0600, Henry Francisco Garcia Cortez wrote:
> how to restrict a user from seeing a schema in postgresql
It is easy to restrict access, but not really possible to keep a user
from seeing the metadata. We consider that a good thing.
Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: schema postgresql
2020-09-11 21:13 schema postgresql Henry Francisco Garcia Cortez <garcortez@gmail.com>
2020-09-12 23:36 ` Re: schema postgresql Laurenz Albe <laurenz.albe@cybertec.at>
@ 2020-09-14 14:13 ` Stephen Frost <sfrost@snowman.net>
0 siblings, 0 replies; 4+ messages in thread
From: Stephen Frost @ 2020-09-14 14:13 UTC (permalink / raw)
To: Laurenz Albe <laurenz.albe@cybertec.at>; +Cc: Henry Francisco Garcia Cortez <garcortez@gmail.com>; pgsql-admin@lists.postgresql.org
Greetings,
* Laurenz Albe (laurenz.albe@cybertec.at) wrote:
> On Fri, 2020-09-11 at 15:13 -0600, Henry Francisco Garcia Cortez wrote:
> > how to restrict a user from seeing a schema in postgresql
>
> It is easy to restrict access, but not really possible to keep a user
> from seeing the metadata. We consider that a good thing.
I don't see why that is or should be the case. If there's no reason or
need for someone to have access to that metadata, then they shouldn't
have access to it. There was some work to implement RLS on the catalog
tables at one point but unfortunately that's not likely to actually be a
good solution since so much access to the catalog doesn't go through the
exectuor, but the general idea of limiting access to that information is
a good one.
If it was free to do so, or only impacted those who wanted that without
complicating the code a lot, it'd absolutely be a good improvement.
Unfortunately, there's no simple way to ensure that and I don't know of
anyone actively working to figure out a way, but I disagree with the
idea that the current state is 'a good thing'.
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2020-09-14 14:13 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-09-11 21:13 schema postgresql Henry Francisco Garcia Cortez <garcortez@gmail.com>
2020-09-12 06:06 ` Paul Förster <paul.foerster@gmail.com>
2020-09-12 23:36 ` Laurenz Albe <laurenz.albe@cybertec.at>
2020-09-14 14:13 ` Stephen Frost <sfrost@snowman.net>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox