Received: from maia.hub.org (maia-5.hub.org [200.46.204.29]) by mail.postgresql.org (Postfix) with ESMTP id CBF43B5DC0A for ; Fri, 22 Jul 2011 10:24:32 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.29]) (amavisd-maia, port 10024) with ESMTP id 28292-02 for ; Fri, 22 Jul 2011 13:24:26 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from mail25.opentransfer.com (mail25.opentransfer.com [76.162.254.25]) by mail.postgresql.org (Postfix) with SMTP id 8B3E8B5DBC5 for ; Fri, 22 Jul 2011 10:24:24 -0300 (ADT) Received: (qmail 2866 invoked by uid 399); 22 Jul 2011 13:24:22 -0000 Received: from unknown (HELO ?192.168.0.16?) (juanrcuervo@quality-telecom.net@190.1.135.54) by mail25.opentransfer.com with SMTP; 22 Jul 2011 13:24:22 -0000 Message-ID: <4E297A07.9090907@quality-telecom.net> Date: Fri, 22 Jul 2011 08:24:23 -0500 From: "Juan Cuervo (Quality Telecom)" Organization: Quality Telecom User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20110624 Thunderbird/5.0 MIME-Version: 1.0 To: Scott Marlowe CC: pgsql-admin@postgresql.org Subject: Re: revoked permissions on table still allows users to see table's structure References: <4E28BF6E.8090302@quality-telecom.net> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.9 tagged_above=-10 required=5 tests=BAYES_00=-1.9 X-Spam-Level: X-Archive-Number: 201107/165 X-Sequence-Number: 37944 Hi Scott Thanks for your answer. It should be a way to prevent this from normal users who only need access to a set of tables, a view or even a store procedure. (Maybe a VIEW_SCHEMA privilege of roles?). View a table's structure should only be allowed to users who has at least one privilege on the table. It doesnt make much sense to me that every user with access to the database , would be able to see the whole database design. Do you know if this is common in other RDBMS ? Regards, Juan R. Cuervo Soto Quality Telecom Ltd www.quality-telecom.net PBX : (575) 3693300 CEL : (57) 301-4174865 El 21/07/2011 08:48 p.m., Scott Marlowe escribió: > On Thu, Jul 21, 2011 at 6:08 PM, Juan Cuervo (Quality Telecom) > wrote: >> Hi All >> >> I'm new to the list, but have a few years as postgres user. I want to share >> what I consider a rare behavior of postgresql regarding database object's >> premissions: >> >> I have noticed that there is no way (at least no one I know) to prevent a >> user from seeing the table's structures in a database. >> >> Is this a normal behavior of the product ? > Yep. Completely normal. > >> Is there a way to prevent a user from seeing my table's, procedure's and >> function's code ? > Don't let them connect to the db? That's all I can think of. >