Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 2EFB3632CEC for ; Wed, 4 Feb 2009 10:48:47 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 74692-03 for ; Wed, 4 Feb 2009 10:48:40 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from gwmta.wicourts.gov (gwmta.wicourts.gov [165.219.244.99]) by mail.postgresql.org (Postfix) with ESMTP id 201C3632CF0 for ; Wed, 4 Feb 2009 10:48:40 -0400 (AST) Received: from Courts-MTA by gwmta.wicourts.gov with Novell_GroupWise; Wed, 04 Feb 2009 08:48:38 -0600 Message-Id: <49895663.EE98.0025.0@wicourts.gov> X-Mailer: Novell GroupWise Internet Agent 7.0.3 Date: Wed, 04 Feb 2009 08:48:35 -0600 From: "Kevin Grittner" To: ,"raf" Subject: Re: How to prevent users from creating tables References: <20090204005222.GA19588@raf.org> <20090204143740.GA25312@raf.org> In-Reply-To: <20090204143740.GA25312@raf.org> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200902/36 X-Sequence-Number: 31257 >>> raf wrote: > revoke all privileges on schema public from public; > revoke all privileges on schema public from staff; -- staff is a role > > then i get two warnings: > > WARNING: no privileges could be revoked for "public" > WARNING: no privileges could be revoked for "public" > > and a member of the staff role can still create tables. > if i replace "all privileges" with just "create", i > get the same warnings and still no effect. Are you logged in as a database superuser? (Database owner is not good enough for this operation.) -Kevin