MIME-Version: 1.0
References: <VisenaEmail.0.81936c517b2d9cfe.191e44de951@origo-test01.app.internal.visena.net>
 <3952715.1726115805@sss.pgh.pa.us> <VisenaEmail.1.4f10ceb0099d6ab1.191e48a6946@origo-test01.app.internal.visena.net>
 <CAKAnmm+SrS1=ggcc9qCAXd=uzJWzwH_CciM+aRr-PtDZjrEuRA@mail.gmail.com>
 <CAFCRh-8cornyWJPgKGgLr12d4CMvOEaOOw6yQtJNAqYSC0fYCg@mail.gmail.com> <CAKAnmm+qs8yrviNEbdJf-NLwBiYSxWYN0RHJkcCTjZZVyY8huA@mail.gmail.com>
In-Reply-To: <CAKAnmm+qs8yrviNEbdJf-NLwBiYSxWYN0RHJkcCTjZZVyY8huA@mail.gmail.com>
From: Dominique Devienne <ddevienne@gmail.com>
Date: Thu, 12 Sep 2024 16:10:56 +0200
Message-ID: <CAFCRh-_8P=Se_4F5VXn=Z9vc5Dj6+k+xd7HGtt5zsg_=Ltqiyw@mail.gmail.com>
Subject: Re: Effects of REVOKE SELECT ON ALL TABLES IN SCHEMA pg_catalog FROM PUBLIC
To: Greg Sabino Mullane <htamfids@gmail.com>
Cc: Andreas Joseph Krogh <andreas@visena.com>, Tom Lane <tgl@sss.pgh.pa.us>, 
	pgsql-general@lists.postgresql.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/CAFCRh-_8P%3DSe_4F5VXn%3DZ9vc5Dj6%2Bk%2Bxd7HGtt5zsg_%3DLtqiyw%40mail.gmail.com>
Precedence: bulk

On Thu, Sep 12, 2024 at 3:53=E2=80=AFPM Greg Sabino Mullane <htamfids@gmail=
.com> wrote:
> On Thu, Sep 12, 2024 at 9:12=E2=80=AFAM Dominique Devienne <ddevienne@gma=
il.com> wrote:
>> On Thu, Sep 12, 2024 at 3:06=E2=80=AFPM Greg Sabino Mullane <htamfids@gm=
ail.com> wrote:
>> > (Also note that determining if a database or user exists does not even=
 require a successful login to the cluster.)
>>
>> Hi. How so? I was not aware of such possibilities.
>> Can you please give pointers (docs, examples) of this?
>
> psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed: =
FATAL:  role "eve" does not exist
> psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed: =
FATAL:  database "theater" does not exist
> psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed: =
FATAL:  password authentication failed for user "alice"

Ah silly me, I was thinking of something else.
Sure, "probing" for DB or USER names by attempting connecting is of
course an option.
Thanks, --DD