From: Sabyasachi Mukherjee <mukherjee.sabyasachi@outlook.com>
To: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Question about permissions in the Schema
Thread-Topic: Question about permissions in the Schema
Thread-Index: AQHb1HxcoJcey0wvAk2o4RpXRRAL6A==
Date: Tue, 3 Jun 2025 11:44:41 +0000
Message-ID: 
 <PAXP194MB1230AFF50B791AD42BAF6EFE8C6DA@PAXP194MB1230.EURP194.PROD.OUTLOOK.COM>
Accept-Language: en-IN, en-US
Content-Language: en-IN
msip_labels: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PAXP194MB1230:EE_|AM7P194MB0772:EE_
x-ms-office365-filtering-correlation-id: d353169f-63e0-4252-16e9-08dda2940723
x-ms-exchange-slblob-mailprops: 
 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
x-microsoft-antispam: 
 BCL:0;ARA:14566002|15030799003|8062599006|7092599006|8060799009|461199028|15080799009|19110799006|3412199025|440099028|102099032;
x-microsoft-antispam-message-info: 
 =?iso-8859-1?Q?l3izL1ONBBGV95Icl3v728Mxs8D7tu5I2nseuz3OsAy3WInYZZ2YehEoJb?=
 =?iso-8859-1?Q?Ok3TC9O93Y4GNVMb/gN0TDiO0Ho4kl7TkFs2RfEvL3xzc70lOEnMGcxCaO?=
 =?iso-8859-1?Q?8gSXpPMZT0h5VwL3G4Fxm8GWKCZBaB+GB/K8zWyRQS+E1LksyBzN3CAUw7?=
 =?iso-8859-1?Q?VLOc70pG0+vq8PVwME3U032xSMk/mhk2NCZ2bJqNmKW03djZ6HG9x2B0Gq?=
 =?iso-8859-1?Q?OhK5OBg+Swe3YL+fk0AT9i2mhy5hVSvHzZa81LQiwIXezg74QTRgloeEEl?=
 =?iso-8859-1?Q?nr6FuWqji4VBfJmRyFqk/dwAYjqSd+dMjFVRQtPLvG8H0GGuhoYZQ9Uk0s?=
 =?iso-8859-1?Q?1JoC0EWtpVP9X46Uq2zXfoctHkvNFLuVUkSaxOQTgsXF3QjP7J2PXST5Ky?=
 =?iso-8859-1?Q?+LAry5t1AJq2t8Jcj+dE8FMnsaSBOfN6DLnodDyGnu4V15EC2zFuASrFR0?=
 =?iso-8859-1?Q?TekNjaIW2xxVIjuS9ZUKd8cRSerLc6PH/B/FpvrmRDmp2OYo0Yv0l3jaAC?=
 =?iso-8859-1?Q?yyQFhsLq//kzx8Y1OXBwC7SJZReHqZdqHDwmUc0MsHXZKjouvKCjShvFwH?=
 =?iso-8859-1?Q?6ZLzXGZ9KC59/DAEQY2JEUsCoQSHmCNyonZjm7g+WVJYjROAWpKG+D4Y4i?=
 =?iso-8859-1?Q?XUPRkmc/bq/I9U+Qi1A9vY7T6taTbM2MGU77BdsBBFF6TGciVVgygWQqTv?=
 =?iso-8859-1?Q?td8yg6y+JutFb1nB2q/FaOvNv2+7bzlM3zyqvlvNqb/kW8Pa7D8V8MgqrJ?=
 =?iso-8859-1?Q?JLZX2bzVBNFeAnmeohjDR9rVUeQ5m2jdMuII+TND5mFIwlLZ6ksRcxktgB?=
 =?iso-8859-1?Q?863MKzpV/GiAhhpGe3YFYdXBh4l5XUF4++hUPU3az1GypZXcB7IFetR0bO?=
 =?iso-8859-1?Q?whEnpMLSLuRfJlrauezmj9jNC266Kfxoq4B2CZfyzmKT5+HtMQ64OsO+J+?=
 =?iso-8859-1?Q?AjNfhSaCXueS/DqMHTS98E1r6BVZY6BOgunI8gyvElHFCp9+OyojTa9VhN?=
 =?iso-8859-1?Q?2AdfwO10yGpaaM5XQ13jJjqFbdgdFi+Gz0SxNTFChzop6ggIbQ1Qz8IXVo?=
 =?iso-8859-1?Q?Z47qNVndye3bzuR4vZzv4n0844bc3ZL/odHPPyc1W48jbAD8lP8HTrLOZz?=
 =?iso-8859-1?Q?llNpWxE/FBwbufsK+z3wPeHdMe3MrNUxuFCLttAcBGsICFgxs7Axkkefcu?=
 =?iso-8859-1?Q?mDPZr76alHKlOg=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?iso-8859-1?Q?y1O3JPuZimSGAJEOLZjbwzfTj1TL/3A6hr+0tmR7Yn79qQrUzOsz/Iir4E?=
 =?iso-8859-1?Q?ZkMZSo4xmOUiBv4SPvheqVC5hD2ST8ZzIaccuRa3slGcQgK5jd4jIZ7PN6?=
 =?iso-8859-1?Q?2QSwPb5MMTk1Yune4CjLBq0vtJsFd1OcePGr9+cpv5fC9YXxCxpcSSRQuQ?=
 =?iso-8859-1?Q?1SSQvmPOGgBFVF4U0s6CvxC9gBaPfPURh22jk8UKRLNqq6H4u9YMbZoqze?=
 =?iso-8859-1?Q?I8aM6FEoxURWRvNUPLqFTv7/PiRZdN0zfpgDhkpZ/IcsuWKbTmrQ0duhLd?=
 =?iso-8859-1?Q?rOUxpnW9Zbsy7f4AH+je6oY49f00zNTVwJXX0WO6rWUKSMylqMg8UvV5cH?=
 =?iso-8859-1?Q?PWaXNbE5ys7VOiUH/JBbY21GLEs01+Yb8+YVOkILyYF0hkiVqAYNZ/1HXV?=
 =?iso-8859-1?Q?jo0+SwWdQ3vv7W8FWP+Uyw/4agPAio/6V0MKUiO/Qv2IO8QN6aezL3q60s?=
 =?iso-8859-1?Q?MxuoEiQO9F8VI6rGSJzVvLtB+VWZpzxVmYYbwqOOJVos6WVpJYDxXOEkDq?=
 =?iso-8859-1?Q?u7qYbn4se3O9e/vQOAWYXQle+wOdBHe5TnpfM/oFApbxYp+XY0Jod5seIS?=
 =?iso-8859-1?Q?EQodF0DiUbLuaXLpS45swvcl5yIEwo7k7wNOK23+k+CBEzJQL6S4n7cuA/?=
 =?iso-8859-1?Q?V3XLJSzTk9CVH/9b0k5Qtc9FCJn1kiWgJCi0ZYdz/E2wqxyhY9nUKGfxzB?=
 =?iso-8859-1?Q?gMSbwS9nkEp0SMY26R0BsLYROqaXnXVZ+R2SaZuXOH6uBmcJP6QswxUR0u?=
 =?iso-8859-1?Q?gfn1WTD97iEVsHoKhfkRZCRHJuJ7czg+rpum9M4N+9yhDL73/F64hym22R?=
 =?iso-8859-1?Q?pTQcs8bN4Fe0gu5MYYc3+JtahXUhzHkYaYWdn7PTXfmlUQYTQ/5GHiCoQD?=
 =?iso-8859-1?Q?zC+5Gk++QcXTnhUAuLmONeZAEG8/IE0kr3aVP6vbdj/LxulZzCF7PNuAJm?=
 =?iso-8859-1?Q?zQ6sjmGRkzyCDRlPVMFaKQKcudp1gO54Q5OZ6kMSYCA0G/nLvNyK9lEuWa?=
 =?iso-8859-1?Q?aYeisK1Z75hNcZAMsBdeZslXhgstsc906BO1CZE2Xk3fjD7r9oQaVwFvVC?=
 =?iso-8859-1?Q?lmIdw2KXSqh8teA0lCXQTAYPEysp0D05xUrcevvljHtf4ahkuGji8QEBvz?=
 =?iso-8859-1?Q?Zq+ZfppBMsxqQOx0lcEkzFh0fneAyH9rdFAOCqdtz11MXji6rLzCmZu2S9?=
 =?iso-8859-1?Q?LjALA0Tk5oQTpGFxIIDCfZLau5aQgf8+7AnCJrK3ZM44RyTUuNHv1h8asC?=
 =?iso-8859-1?Q?tvw8sPa73vLvLaamH+hJk5g+XXiiHO0xGIj4Bm/bD58Gl9kP5aiFvXPH5C?=
 =?iso-8859-1?Q?KNP/?=
Content-Type: multipart/alternative;
	boundary="_000_PAXP194MB1230AFF50B791AD42BAF6EFE8C6DAPAXP194MB1230EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PAXP194MB1230.EURP194.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 
 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 d353169f-63e0-4252-16e9-08dda2940723
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jun 2025 11:44:41.5036
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 
 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7P194MB0772
List-Id: <pgsql-admin.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-admin@lists.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-admin>
Archived-At: 
 <https://www.postgresql.org/message-id/PAXP194MB1230AFF50B791AD42BAF6EFE8C6DA%40PAXP194MB1230.EURP194.PROD.OUTLOOK.COM>
Precedence: bulk

--_000_PAXP194MB1230AFF50B791AD42BAF6EFE8C6DAPAXP194MB1230EURP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello,
I have a database with 5 different schemas. Each schema has the same set of=
 tables, but the data is different.
I have created one user to access the data in the tables from one schema on=
ly.
The user can access the data from the target schema. For all other schemas =
it get a permission error except one.
I have specifically run the Revoke command for the schema but still the use=
r can access the data from that schema. I have run the command in PGAdmin. =
Also DBBeaver does not any permission for the objects in the leaking schema=
 for the user.
What could be wrong and how should I fix it.
I am running PG 17 on Linux.

Thanks & Regards

Sabyasachi Mukherjee

--_000_PAXP194MB1230AFF50B791AD42BAF6EFE8C6DAPAXP194MB1230EURP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello,</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I have a database with 5 different schemas. Each schema has the same set of=
 tables, but the data is different.</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I have created one user to access the data in the tables from one schema on=
ly.</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The user can access the data from the target schema. For all other schemas =
it get a permission error except one.</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I have specifically run the Revoke command for the schema but still the use=
r can access the data from that schema. I have run the command in PGAdmin. =
Also DBBeaver does not any permission for the objects in the leaking schema=
 for the user.</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
What could be wrong and how should I fix it.</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I am running PG 17 on Linux.&nbsp;</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks &amp; Regards</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Sabyasachi Mukherjee</div>
</body>
</html>

--_000_PAXP194MB1230AFF50B791AD42BAF6EFE8C6DAPAXP194MB1230EURP_--