Feedback-ID: i76984098:Fastmail
Message-ID: <671802a8-95b0-4af1-ad43-2e131057a89a@aklaver.com>
Date: Fri, 18 Oct 2024 09:14:32 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Permissions for Newly Created User
To: sreekanta reddy <sreekantareddy18@gmail.com>,
 pgsql-general@lists.postgresql.org
References: <CAK5dmvD-63hFPBZ+GnuZEO9Knabpw1wnrWnrHuADjWPFF-Pgvw@mail.gmail.com>
Content-Language: en-US
From: Adrian Klaver <adrian.klaver@aklaver.com>
In-Reply-To: <CAK5dmvD-63hFPBZ+GnuZEO9Knabpw1wnrWnrHuADjWPFF-Pgvw@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://www.postgresql.org/message-id/671802a8-95b0-4af1-ad43-2e131057a89a%40aklaver.com>
Precedence: bulk

On 10/18/24 03:11, sreekanta reddy wrote:
> 
> Dear PostgreSQL Support Team,
> 
> I would also like to suggest an enhancement to the default behavior for 
> newly created users in PostgreSQL.
> 
> *Observed Issue:
> *User Created: testdb
> Command used: CREATE USER testdb WITH PASSWORD 'dhsfjobodjjbsdj';
> After creating the user testdb, I observed that the user could still 
> view objects, schemas, and their structures, as well as system tables 
> and views, which contradicts the intended restricted permissions. 

What restrictions?

The user has what is specified here:

https://www.postgresql.org/docs/current/ddl-priv.html

Pay particular attention to what is granted to the PUBLIC role.

If you want the role to have less privilges that what the defaults are 
then you will need to explicitly revoke them.


-- 
Adrian Klaver
adrian.klaver@aklaver.com