MIME-Version: 1.0
References: <VisenaEmail.0.81936c517b2d9cfe.191e44de951@origo-test01.app.internal.visena.net>
 <3952715.1726115805@sss.pgh.pa.us> <VisenaEmail.1.4f10ceb0099d6ab1.191e48a6946@origo-test01.app.internal.visena.net>
 <CAKAnmm+SrS1=ggcc9qCAXd=uzJWzwH_CciM+aRr-PtDZjrEuRA@mail.gmail.com> <VisenaEmail.21.e9d63efdf68bfe51.191e663ceda@origo-test01.app.internal.visena.net>
In-Reply-To: <VisenaEmail.21.e9d63efdf68bfe51.191e663ceda@origo-test01.app.internal.visena.net>
From: Greg Sabino Mullane <htamfids@gmail.com>
Date: Thu, 12 Sep 2024 09:58:53 -0400
Message-ID: <CAKAnmm+ODqpCAF+jbqWaGRD8UBJhS66Us0deWQ01+PbOiS4L8A@mail.gmail.com>
Subject: Re: Effects of REVOKE SELECT ON ALL TABLES IN SCHEMA pg_catalog FROM PUBLIC
To: Andreas Joseph Krogh <andreas@visena.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, pgsql-general@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000ebb8d70621ec835f"
Archived-At: <https://www.postgresql.org/message-id/CAKAnmm%2BODqpCAF%2BjbqWaGRD8UBJhS66Us0deWQ01%2BPbOiS4L8A%40mail.gmail.com>
Precedence: bulk

--000000000000ebb8d70621ec835f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 12, 2024 at 9:21=E2=80=AFAM Andreas Joseph Krogh <andreas@visen=
a.com>
wrote:

> Yes, it *is* theater, but that doesn't prevent =E2=80=9Ccompliance people=
=E2=80=9D to
> care about it. We have to take measures to prevent =E2=80=9Cinformation l=
eaks=E2=80=9D.
>

*shrug* Then the compliance people are not good at their jobs, frankly.

But if it works for you, go ahead. As Tom said, it will work 95% of the
time. But it will break things that should work, and it will not prevent
the ability to get the information in other ways. To be clear, we never
recommend messing with the system catalogs, and this falls under the
umbrella of messing with the system catalogs.

Cheers,
Greg

--000000000000ebb8d70621ec835f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Thu, Sep 12, 2024 at 9:21=E2=80=AFAM A=
ndreas Joseph Krogh &lt;<a href=3D"mailto:andreas@visena.com">andreas@visen=
a.com</a>&gt; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex"><div>Yes, it <i>is</i> theater, but that d=
oesn&#39;t prevent =E2=80=9Ccompliance people=E2=80=9D to care about it. We=
 have to take measures to prevent =E2=80=9Cinformation leaks=E2=80=9D.</div=
></blockquote><div><br></div><div>*shrug* Then the compliance=C2=A0people a=
re not good at their jobs, frankly.</div><div><br></div><div>But if it work=
s for you, go ahead. As Tom said, it will work 95% of the time. But it will=
 break things that should work, and it will not prevent the ability to get =
the information in other ways. To be clear, we never recommend messing with=
 the system catalogs, and this falls under the umbrella=C2=A0of messing wit=
h the system catalogs.</div><div><br></div><div>Cheers,</div><div>Greg</div=
><div><br></div></div></div>

--000000000000ebb8d70621ec835f--