Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.600.62\))
Subject: Re: Effects of REVOKE SELECT ON ALL TABLES IN SCHEMA pg_catalog FROM
 PUBLIC
From: Christophe Pettus <xof@thebuild.com>
In-Reply-To: <CAKAnmm+ODqpCAF+jbqWaGRD8UBJhS66Us0deWQ01+PbOiS4L8A@mail.gmail.com>
Date: Thu, 12 Sep 2024 07:10:26 -0700
Cc: Tom Lane <tgl@sss.pgh.pa.us>,
 pgsql-general <pgsql-general@lists.postgresql.org>,
 Greg Sabino Mullane <htamfids@gmail.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <97788FFC-9F3D-43EC-BC76-AD695250C11A@thebuild.com>
References: <VisenaEmail.0.81936c517b2d9cfe.191e44de951@origo-test01.app.internal.visena.net>
 <3952715.1726115805@sss.pgh.pa.us>
 <VisenaEmail.1.4f10ceb0099d6ab1.191e48a6946@origo-test01.app.internal.visena.net>
 <CAKAnmm+SrS1=ggcc9qCAXd=uzJWzwH_CciM+aRr-PtDZjrEuRA@mail.gmail.com>
 <VisenaEmail.21.e9d63efdf68bfe51.191e663ceda@origo-test01.app.internal.visena.net>
 <CAKAnmm+ODqpCAF+jbqWaGRD8UBJhS66Us0deWQ01+PbOiS4L8A@mail.gmail.com>
To: Andreas Joseph Krogh <andreas@visena.com>
Archived-At: <https://www.postgresql.org/message-id/97788FFC-9F3D-43EC-BC76-AD695250C11A%40thebuild.com>
Precedence: bulk


> On Sep 12, 2024, at 06:58, Greg Sabino Mullane <htamfids@gmail.com> =
wrote:
>=20
> But if it works for you, go ahead. As Tom said, it will work 95% of =
the time. But it will break things that should work, and it will not =
prevent the ability to get the information in other ways. To be clear, =
we never recommend messing with the system catalogs, and this falls =
under the umbrella of messing with the system catalogs.

I can only echo that if the compliance people are taking a position that =
"you need to make an unsupported, ad-hoc modification to the database =
software's authentication system in order to meet this requirement," =
then the requirement is one that you should run, not walk, to get a =
waiver to, as that's a very unreasonable position for them to take.=