From: Milen A. Radev <milen@radev.net>
To: pgsql-admin@postgresql.org
Subject: Re: How to prevent users from creating tables
Date: Wed, 04 Feb 2009 04:05:56 +0200
Message-ID: <gmat64$unq$1@ger.gmane.org> (raw)
In-Reply-To: <20090204005222.GA19588@raf.org>
References: <20090204005222.GA19588@raf.org>
raf написа:
> hi,
>
> in my database, normal users can't select, insert, update or
> delete anything directly. they can only call functions which
> are all security defining functions which give access to the
> data. that's the way i like it.
>
> however, i discovered that normal users can create new
> tables in the database. is there any way to prevent this?
> i couldn't find any grant/revoke syntax in the doco that
> looked relevant.
[...]
You need to revoke the "CREATE" privilege for the schema(s) in question
(http://www.postgresql.org/docs/current/static/sql-grant.html#SQL-GRANT-DESCRIPTION-OBJECTS).
--
Milen A. Radev
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: milen@radev.net
Subject: Re: How to prevent users from creating tables
In-Reply-To: <gmat64$unq$1@ger.gmane.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox