Received: from maia.hub.org (maia-2.hub.org [200.46.204.251]) by mail.postgresql.org (Postfix) with ESMTP id 06C23632D41 for ; Tue, 10 Aug 2010 16:56:46 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia, port 10024) with ESMTP id 03316-10 for ; Tue, 10 Aug 2010 19:56:38 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-qw0-f46.google.com (mail-qw0-f46.google.com [209.85.216.46]) by mail.postgresql.org (Postfix) with ESMTP id 966AA632C10 for ; Tue, 10 Aug 2010 16:56:38 -0300 (ADT) Received: by qwh6 with SMTP id 6so8567414qwh.19 for ; Tue, 10 Aug 2010 12:56:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=gQIQUurJRnNNClwGCs1reg2yaeFbxvKFfVMNnXJSFCc=; b=XuhrX5iT2RqWfOnZoC2UeV6dt+BQ4dCMfJeB++Ro68L/P3miQ3lKyBFnKn84e3RLLV rGdXiMWkTHF55lw5vfHTUfCW61ld9+ku26k45MHG6c0OXdHnovrN6gOx/i/ZVGb1DnAQ r5rbZeVJWJHvmi3lruiHdjh5j1hLs9YAHzk/k= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=OhU9VNeV4Oj2wkNg3oownhVukQYhfuaeFR5FlIZigLFXSZqTSx6BVIe4fzdUHAfY7Y Cb7H0Rcvyl2ZtYbQu/idWCnC+cM+mvg3I+lxjgH5MUDbqFuHs6vjfnlIQUA1OVoXnN3m kq6uYgz4kJ4+vPZFxFFGXUyVLxmmt58mdQwq8= MIME-Version: 1.0 Received: by 10.224.73.209 with SMTP id r17mr9981880qaj.2.1281470197565; Tue, 10 Aug 2010 12:56:37 -0700 (PDT) Received: by 10.229.249.6 with HTTP; Tue, 10 Aug 2010 12:56:37 -0700 (PDT) In-Reply-To: <232B5217AD58584C87019E8933556D110211D1AF24@redmx2.esri.com> References: <232B5217AD58584C87019E8933556D110211D1AE9F@redmx2.esri.com> <232B5217AD58584C87019E8933556D110211D1AEDA@redmx2.esri.com> <4C6164E50200002500034463@gw.wicourts.gov> <232B5217AD58584C87019E8933556D110211D1AF24@redmx2.esri.com> Date: Tue, 10 Aug 2010 21:56:37 +0200 Message-ID: Subject: Re: postgres function does not handle PUBLIC - expected? From: Szymon Guz To: Kasia Tuszynska Cc: Kevin Grittner , "pgsql-admin@postgresql.org" Content-Type: multipart/alternative; boundary=0015175cba8aea8dfe048d7d8750 X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.899 tagged_above=-10 required=5 tests=BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001 X-Spam-Level: X-Archive-Number: 201008/76 X-Sequence-Number: 35325 --0015175cba8aea8dfe048d7d8750 Content-Type: text/plain; charset=UTF-8 2010/8/10 Kasia Tuszynska > Kevin, > I know public is there from using it every day, but if it were not for you > post I would not know how to prove it, none of the views, graphical admin > tools etc. display it as a user. > > We found this issue because we can grant privs to public on a table, but > could not revoke them. If I did not "know" that public was there ( because > in my experience it is there in oracle, sql server and the Informix dbs) how > would I check for it's existence on Postgres? > > Thank you, > Kasia "The key word PUBLIC refers to the implicitly defined group of all roles." http://www.postgresql.org/docs/8.4/static/sql-revoke.html So PUBLIC seems to be a kind of magical role. I didn't know that, sorry for my previous, a little bit confusing email. regards Szymon --0015175cba8aea8dfe048d7d8750 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

2010/8/10 Kasia Tuszynska <ktuszynska@esri.com><= /span>
Kevin,
I know public is there from using it every day, but if it were not for you = post I would not know how to prove it, none of the views, graphical admin t= ools etc. display it as a user.

We found this issue because we can grant privs to public on a table, but co= uld not revoke them. If I did not "know" that public was there ( = because in my experience it is there in oracle, sql server and the Informix= dbs) how would I check for it's existence on Postgres?

Thank you,
Kasia

"= The key word PUBLIC refers to the implicitly defined group of all roles.&qu= ot;
http://www.postgresql.org/docs/8.4/static/sql-revoke.html


So PUBLIC seems to be a kind of magical r= ole. I didn't know that, sorry for my previous, a little bit confusing = email.

regards
Szymon

=C2= =A0
--0015175cba8aea8dfe048d7d8750--