Date: Tue, 31 Mar 2015 16:44:04 -0300 (BRT)
From: BRUNO CESAR BERNARDES <bruno.bernardes@embrapa.br>
To: gilberto castillo <gilberto.castillo@etecsa.cu>
Cc: pgsql-admin@postgresql.org
Message-ID: <332364131.14649564.1427831044036.JavaMail.root@embrapa.br>
In-Reply-To: <46538.192.168.207.54.1427817551.squirrel@webmail.etecsa.cu>
Subject: Re: Catalog permissions
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_Part_14649563_616141995.1427831044035"
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

------=_Part_14649563_616141995.1427831044035
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Thanks Gilberto,=20

The problem still the same.=20
The user is allowed to see the entire installation catalog, all databases, =
all schemas, etc. Of course, he is allowed to see data only in the schema t=
hat I gave this permission.=20
The ideia is to be shoed to him only the datbase end schema that he has per=
mission.=20
I applied the command "Alter user myuser set default_transaction_read_only =
=3D on;" to this user . The others were already set.=20

Saludos,=20
Bruno=20

----- Mensagem original -----

De: "Gilberto Castillo" <gilberto.castillo@etecsa.cu>=20
Para: "BRUNO CESAR BERNARDES" <bruno.bernardes@embrapa.br>=20
Cc: pgsql-admin@postgresql.org=20
Enviadas: Ter=E7a-feira, 31 de mar=E7o de 2015 12:59:11=20
Assunto: Re: [ADMIN] Catalog permissions=20


> Hi,=20
>=20
> I have to allow one user to use my Postgres installation in one schema of=
=20
> several. We are preparing an phpPGAdmin installation to give an remote=20
> access to this schema.=20
> The phpPDAdmin is showing the entire catalog to this user and allowing=20
> access only in the schema that I gave permissions to him.=20
> How do I do to this user can see only the schema that he has access, not=
=20
> the entire catalog.=20
> Is it possible?=20

Use:=20

GRANT usage on schema zzz to uuu;=20
Alter user uuu set default_transaction_read_only =3D on;=20
GRANT select on all tables in schema zzz to uuu;=20


Saludos,=20
Gilberto Castillo=20
ETECSA, La Habana, Cuba=20

---=20
This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running=
 at host imx3.etecsa.cu=20
Visit our web-site: <http://www.kaspersky.com>, <http://www.viruslist.com>=
=20


--=20
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)=20
To make changes to your subscription:=20
http://www.postgresql.org/mailpref/pgsql-admin=20


-=20


=0A________________________________________________________________________=

____=0AAviso de confidencialidade =0A=0AEsta mensagem da Empresa  Brasileira=

 de Pesquisa  Agropecuaria  (Embrapa),=0Aempresa publica federal  regida pel=

o disposto  na Lei Federal no. 5.851,  de=0A7 de dezembro de 1972,  e  envia=

da exclusivamente  a seu destinatario e pode=0Aconter informacoes  confidenc=

iais, protegidas  por sigilo profissional.  Sua=0Autilizacao desautorizada  =

e ilegal e  sujeita o infrator as penas da lei. Se=0Avoce  a recebeu indevid=

amente, queira, por gentileza, reenvia-la ao emitente,=0Aesclarecendo o equi=

voco.=0A=0AConfidentiality note=0A=0AThis message from Empresa  Brasileira d=

e Pesquisa  Agropecuaria  (Embrapa), a=0Agovernment company  established und=

er  Brazilian law  (5.851/72), is directed=0Aexclusively to  its addressee  =

and may contain  confidential data,  protected=0Aunder  professional secrecy=

  rules. Its unauthorized  use is illegal and  may=0Asubject the transgresso=

r to the law's penalties. If you are not the addressee,=0Aplease send it bac=

k, elucidating the failure.=0A=0A=0A


------=_Part_14649563_616141995.1427831044035
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><=
div style=3D'font-family: arial,helvetica,sans-serif; font-size: 12pt; colo=
r: #000000'>Thanks Gilberto,<br><br>&nbsp;&nbsp;&nbsp; The problem still th=
e same. <br>&nbsp;&nbsp;&nbsp; The user is allowed to see the entire instal=
lation catalog, all databases, all schemas, etc. Of course, he is allowed t=
o see data only in the schema that I gave this permission.<br>&nbsp; &nbsp;=
 The ideia is to be shoed to him only the datbase end schema that he has pe=
rmission.&nbsp; <br>&nbsp;&nbsp;&nbsp; I applied the command&nbsp; "Alter u=
ser myuser set default_transaction_read_only =3D on;"&nbsp; to this user . =
The others were already set. <br><br>Saludos,<br>Bruno<br><br><hr id=3D"zwc=
hr"><div style=3D"color:#000;font-weight:normal;font-style:normal;text-deco=
ration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>De: =
</b>"Gilberto Castillo" &lt;gilberto.castillo@etecsa.cu&gt;<br><b>Para: </b=
>"BRUNO CESAR BERNARDES" &lt;bruno.bernardes@embrapa.br&gt;<br><b>Cc: </b>p=
gsql-admin@postgresql.org<br><b>Enviadas: </b>Ter=E7a-feira, 31 de mar=E7o =
de 2015 12:59:11<br><b>Assunto: </b>Re: [ADMIN] Catalog permissions<br><br>=
<br><br>&gt; Hi,<br>&gt;<br>&gt; I have to allow one user to use my Postgre=
s installation in one schema of<br>&gt; several. We are preparing an phpPGA=
dmin installation to give an remote<br>&gt; access to this schema.<br>&gt; =
The phpPDAdmin is showing the entire catalog to this user and allowing<br>&=
gt; access only in the schema that I gave permissions to him.<br>&gt; How d=
o I do to this user can see only the schema that he has access, not<br>&gt;=
 the entire catalog.<br>&gt; Is it possible?<br><br>Use:<br><br>GRANT usage=
 on schema zzz to uuu;<br>Alter user uuu set default_transaction_read_only =
=3D on;<br>GRANT select on all tables in schema zzz to uuu;<br><br><br>Salu=
dos,<br>Gilberto Castillo<br>ETECSA, La Habana, Cuba<br><br>--- <br>This me=
ssage was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at hos=
t imx3.etecsa.cu<br>Visit our web-site: &lt;http://www.kaspersky.com&gt;, &=
lt;http://www.viruslist.com&gt;<br><br><br>-- <br>Sent via pgsql-admin mail=
ing list (pgsql-admin@postgresql.org)<br>To make changes to your subscripti=
on:<br>http://www.postgresql.org/mailpref/pgsql-admin<br></div><br><br><br>=
-<br><div><span name=3D"x"></span><br></div></div>

<br>=

<html>=0A<body>=0A<p align=3D"left"><font size=3D1 >=0A<BR>________________=

____________________________________________________________=0A<BR>Aviso de =

confidencialidade.=0A<br><BR>=0AEsta mensagem da Empresa  Brasileira de Pesq=

uisa  Agropecu&aacute;ria  (Embrapa),=0Aempresa p&ugrave;blica federal  regi=

da pelo disposto  na Lei Federal no. 5.851,  de=0A7 de dezembro de 1972,   &=

eacute;  enviada exclusivamente  a seu destinat&aacute;rio e pode=0Aconter i=

nforma&ccedil;&otilde;es  confidenciais, protegidas  por sigilo profissional=

.  Sua=0Autiliza&ccedil;&atilde;o desautorizada  &eacute; ilegal e sujeita o=

 infrator &agrave;s penas da lei. Se=0Avoc&ecirc;  a recebeu indevidamente, =

queira, por gentileza, reenvi&aacute;-la ao emitente,=0Aesclarecendo o equ&i=

acute;voco.=0A<BR><BR>=0AConfidentiality note=0A<BR><BR>=0AThis message from=

 Empresa  Brasileira de Pesquisa  Agropecu&aacute;ria  (Embrapa), a=0Agovern=

ment company  established under  Brazilian law  (5.851/72), is directed=0Aex=

clusively to  its addressee  and may contain  confidential data,  protected=

=0Aunder  professional secrecy  rules. Its unauthorized  use is illegal and =

 may=0Asubject the transgressor to the law's penalties. If you are not the a=

ddressee,=0Aplease send it back, elucidating the failure.=0A<BR>=0A</font>=

=0A</body>=0A</html>=0A

<br>=

</body></html>
------=_Part_14649563_616141995.1427831044035--