From andreas@visena.com Fri May  15 23:23:39 2026
Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-general-owner+archive@lists.postgresql.org>)
	id 1sAXDI-00AXo5-UF
	for pgsql-general@arkaria.postgresql.org; Fri, 24 May 2024 15:52:15 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-general-owner+archive@lists.postgresql.org>)
	id 1sAXDI-006l0m-Vw
	for pgsql-general@arkaria.postgresql.org; Fri, 24 May 2024 15:52:12 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with utf8esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <andreas@visena.com>)
	id 1sAXDI-006l0e-2r
	for pgsql-general@lists.postgresql.org; Fri, 24 May 2024 15:52:12 +0000
Received: from outbound.visena.net ([46.226.12.34])
	by makus.postgresql.org with utf8esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <andreas@visena.com>)
	id 1sAXDA-001nie-MU
	for pgsql-general@lists.postgresql.org; Fri, 24 May 2024 15:52:10 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=visena.com;
	 s=20141101.wh; h=Content-Type:MIME-Version:Subject:Message-ID:To:From:Date:
	Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description;
	 bh=BvcJS7nGkdebGJeruw+h+SwZERr9JaTrCZqmQglXxrQ=; b=BD9ODf7G1lixoeUqM1RVnJb2i
	kRvspOPX2HTOIgERSzObRN3R0sFq634qpXOEpvEJrkCuB/NLLqIiNgyaJMmHeToFDc6GXTAUzYWek
	Ipte8pZJ7HisdSooXbuNQZUvdtBMeqW6k17lmuF8BxOKyNihhGvbrIgK8Iwd4owGisP+k=;
Received: from batch01.services.internal.visena.net ([10.3.0.103])
	by outbound.visena.net with utf8esmtp (Exim 4.93)
	(envelope-from <andreas@visena.com>)
	id 1sAXD5-009UhR-Ae
	for pgsql-general@lists.postgresql.org; Fri, 24 May 2024 17:51:59 +0200
Date: Fri, 24 May 2024 17:51:59 +0200 (CEST)
From: Andreas Joseph Krogh <andreas@visena.com>
To: pgsql-general@lists.postgresql.org
Message-ID: <VisenaEmail.66.54f51e587b38c9cc.18fab4b4eb6@origo-test01.app.internal.visena.net>
Subject: prevent users from SELECT-ing from pg_roles/pg_database
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_364564_1312231377.1716565919269"
X-Mailer: Visena Mail 3.2.688
List-Id: <pgsql-general.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-general@lists.postgresql.org>
List-Owner: <mailto:pgsql-general-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-general>
Archived-At: <https://www.postgresql.org/message-id/VisenaEmail.66.54f51e587b38c9cc.18fab4b4eb6%40origo-test01.app.internal.visena.net>
Precedence: bulk

------=_Part_364564_1312231377.1716565919269
Content-Type: multipart/related; 
	boundary="----=_Part_364565_1969159107.1716565919269"

------=_Part_364565_1969159107.1716565919269
Content-Type: multipart/alternative; 
	boundary="----=_Part_364566_912133674.1716565919282"

------=_Part_364566_912133674.1716565919282
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit



Hi, is there a way to prevent a user/role from SELECT-ing from certain 
system-tables?



I'd like the contents of pg_{user,roles,database} to not be visible to all 
users.



Thanks.






--
Andreas Joseph Krogh
CTO / Partner - Visena AS
Mobile: +47 909 56 963
andreas@visena.com <mailto:andreas@visena.com>
www.visena.com <https://www.visena.com>
 <https://www.visena.com>
------=_Part_364566_912133674.1716565919282
Content-Type: text/html;charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<style class=3D"visena-ck-5-styles">
.ck-content {
    --ck-color-image-caption-background: #f7f7f7;
    --ck-color-image-caption-text: #333333;
    --ck-color-mention-background: #990030E6;
    --ck-color-mention-text: #990030;
    --ck-color-table-caption-background: #f7f7f7;
    --ck-color-table-caption-text: #333333;
    --ck-highlight-marker-blue: #72ccfd;
    --ck-highlight-marker-green: #62f962;
    --ck-highlight-marker-pink: #fc7899;
    --ck-highlight-marker-yellow: #fdfd77;
    --ck-highlight-pen-green: #128a00;
    --ck-highlight-pen-red: #e71313;
    --ck-image-style-spacing: 1.5em;
    --ck-spacing-large: 2px;
    --ck-inline-image-style-spacing: calc(var(--ck-image-style-spacing) / 2=
);
    --ck-todo-list-checkmark-size: 16px;
    /*
    This works when email is READ in Visena-reader, because there the conte=
nt of the email is in "shadow-DOM",
     which has it's own :root, but needs to be declared in ".ck-content p, =
.ck-content div" as well for the actual
     CKEditor to display it correctly, else it get's its default from .lift=
Template

    */
    font-family: Arial, Helvetica, sans-serif;
    font-size: 14px;
}

/* ckeditor5-image/theme/imageresize.css */
.ck-content .image.image_resized {
    max-width: 100%;
    display: block;
    box-sizing: border-box;
}
/* ckeditor5-image/theme/imageresize.css */
.ck-content .image.image_resized img {
    width: 100%;
    height: auto !important;
}
/* ckeditor5-image/theme/imageresize.css */
.ck-content .image.image_resized > figcaption {
    display: block;
}
/* ckeditor5-image/theme/imagecaption.css */
.ck-content .image > figcaption {
    display: table-caption;
    caption-side: bottom;
    word-break: break-word;
    color: var(--ck-color-image-caption-text);
    background-color: var(--ck-color-image-caption-background);
    padding: .6em;
    font-size: .75em;
    outline-offset: -1px;
}

/* ckeditor5-font/theme/fontsize.css */
/* THIS IS A VISENA SPECIFIC CONFIG */
.ck-content p, .ck-content div {
    font-family: Arial, Helvetica, sans-serif;
    font-size: 14px;
}

.ck-content p.visenaNormal {
    margin: 0;
}

/* ckeditor5-font/theme/fontsize.css */
.ck-content .text-tiny {
    font-size: .7em;
}
/* ckeditor5-font/theme/fontsize.css */
.ck-content .text-small {
    font-size: .85em;
}
/* ckeditor5-font/theme/fontsize.css */
.ck-content .text-big {
    font-size: 1.4em;
}
/* ckeditor5-font/theme/fontsize.css */
.ck-content .text-huge {
    font-size: 1.8em;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-block-align-left,
.ck-content .image-style-block-align-right {
    max-width: calc(100% - var(--ck-image-style-spacing));
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-align-left,
.ck-content .image-style-align-right {
    clear: none;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-side {
    float: right;
    margin-left: var(--ck-image-style-spacing);
    max-width: 50%;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-align-left {
    float: left;
    margin-right: var(--ck-image-style-spacing);
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-align-center {
    margin-left: auto;
    margin-right: auto;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-align-right {
    float: right;
    margin-left: var(--ck-image-style-spacing);
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-block-align-right {
    margin-right: 0;
    margin-left: auto;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-style-block-align-left {
    margin-left: 0;
    margin-right: auto;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content p + .image-style-align-left,
.ck-content p + .image-style-align-right,
.ck-content p + .image-style-side {
    margin-top: 0;
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-inline.image-style-align-left,
.ck-content .image-inline.image-style-align-right {
    margin-top: var(--ck-inline-image-style-spacing);
    margin-bottom: var(--ck-inline-image-style-spacing);
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-inline.image-style-align-left {
    margin-right: var(--ck-inline-image-style-spacing);
}
/* ckeditor5-image/theme/imagestyle.css */
.ck-content .image-inline.image-style-align-right {
    margin-left: var(--ck-inline-image-style-spacing);
}
/* ckeditor5-image/theme/image.css */
.ck-content .image {
    clear: both;
    text-align: center;
    min-width: 50px;
    display: inline-flex;
    max-width: 100%;
    align-items: flex-start;
}
/* ckeditor5-image/theme/image.css */
.ck-content .image img {
    display: block;
    margin: 0 auto;
    max-width: 100%;
    min-width: 100%;
}
.ck-content img {
    height: auto !important;
}
/* ckeditor5-image/theme/image.css */
.ck-content .image-inline {
    /*
     * Normally, the .image-inline would have "display: inline-block" and "=
img { width: 100% }" (to follow the wrapper while resizing).;
     * Unfortunately, together with "srcset", it gets automatically stretch=
ed up to the width of the editing root.
     * This strange behavior does not happen with inline-flex.
     */
    display: inline-flex;
    max-width: 100%;
    align-items: flex-start;
}
/* ckeditor5-image/theme/image.css */
.ck-content .image-inline picture {
    display: flex;
}
/* ckeditor5-image/theme/image.css */
.ck-content .image-inline picture,
.ck-content .image-inline img {
    flex-grow: 1;
    flex-shrink: 1;
    max-width: 100%;
}
/* ckeditor5-highlight/theme/highlight.css */
.ck-content .marker-yellow {
    background-color: var(--ck-highlight-marker-yellow);
}
/* ckeditor5-highlight/theme/highlight.css */
.ck-content .marker-green {
    background-color: var(--ck-highlight-marker-green);
}
/* ckeditor5-highlight/theme/highlight.css */
.ck-content .marker-pink {
    background-color: var(--ck-highlight-marker-pink);
}
/* ckeditor5-highlight/theme/highlight.css */
.ck-content .marker-blue {
    background-color: var(--ck-highlight-marker-blue);
}
/* ckeditor5-highlight/theme/highlight.css */
.ck-content .pen-red {
    color: var(--ck-highlight-pen-red);
    background-color: transparent;
}
/* ckeditor5-highlight/theme/highlight.css */
.ck-content .pen-green {
    color: var(--ck-highlight-pen-green);
    background-color: transparent;
}
/* ckeditor5-horizontal-line/theme/horizontalline.css */
.ck-content hr {
    margin: 15px 0;
    height: 4px;
    background: #dedede;
    border: 0;
}
/* ckeditor5-block-quote/theme/blockquote.css */
.ck-content blockquote {
    overflow: hidden;
    padding-right: 0;
    padding-left: 1ex;
    margin-left: 0;
    margin-right: 0;
    font-style: unset !important;
    border-left: solid 1px #cccccc !important;
}
/* ckeditor5-table/theme/blockquote.css */
/* THIS IS A VISENA SPECIFIC CONFIG */
.ck-content .blockquote {
    font-style: unset;
}
/* ckeditor5-block-quote/theme/blockquote.css */
.ck-content[dir=3D"rtl"] blockquote {
    border-left: 0;
    border-right: solid 1px #cccccc;
}
/* ckeditor5-basic-styles/theme/code.css */
.ck-content code {
    background-color: #c7c7c7;
    padding: 0 1px;
    font-size: small;
    border-radius: 2px;
}
/* ckeditor5-table/theme/tablecaption.css */
.ck-content .table > figcaption {
    display: table-caption;
    caption-side: top;
    word-break: break-word;
    text-align: center;
    color: var(--ck-color-table-caption-text);
    background-color: var(--ck-color-table-caption-background);
    padding: .6em;
    font-size: .75em;
    outline-offset: -1px;
}
/* ckeditor5-table/theme/table.css */
.ck-content .table {
    margin: 0 auto;
    display: table;
}
/* ckeditor5-table/theme/table.css */
.ck-content .table table {
    border-collapse: collapse;
    border-spacing: 0;
    width: 100%;
    height: 100%;
    border: 1px double #b3b3b3;
}
/* ckeditor5-table/theme/table.css */
.ck-content .table table td,
.ck-content .table table th {
    min-width: 2em;
    padding: .4em;
    border: 1px solid #bfbfbf;
}
/* ckeditor5-table/theme/table.css */
.ck-content .table table th {
    font-weight: bold;
    background: #000000E6;
}
/* ckeditor5-table/theme/table.css */
.ck-content[dir=3D"rtl"] .table th {
    text-align: right;
}
/* ckeditor5-table/theme/table.css */
.ck-content[dir=3D"ltr"] .table th {
    text-align: left;
}

/*Visena specific*/
.ck-content .table {
    margin-left: 0 !important;
    /*float: left;*/
}

/* ckeditor5-page-break/theme/pagebreak.css */
.ck-content .page-break {
    position: relative;
    clear: both;
    padding: 5px 0;
    display: flex;
    align-items: center;
    justify-content: center;
}
/* ckeditor5-page-break/theme/pagebreak.css */
.ck-content .page-break::after {
    content: '';
    position: absolute;
    border-bottom: 2px dashed #c4c4c4;
    width: 100%;
}
/* ckeditor5-page-break/theme/pagebreak.css */
.ck-content .page-break__label {
    position: relative;
    z-index: 1;
    padding: .3em .6em;
    display: block;
    text-transform: uppercase;
    border: 1px solid #c4c4c4;
    border-radius: 2px;
    font-family: Arial, Helvetica, sans-serif;
    font-size: 0.75em;
    font-weight: bold;
    color: #333333;
    background: #ffffff;
    box-shadow: 2px 2px 1px #000000;
    -webkit-user-select: none;
    -moz-user-select: none;
    -ms-user-select: none;
    user-select: none;
}
/* ckeditor5-media-embed/theme/mediaembed.css */
.ck-content .media {
    clear: both;
    margin: 0 0;
    display: block;
    min-width: 15em;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list {
    list-style: none;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list li {
    margin-bottom: 5px;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list li .todo-list {
    margin-top: 5px;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list .todo-list__label > input {
    -webkit-appearance: none;
    display: inline-block;
    position: relative;
    width: var(--ck-todo-list-checkmark-size);
    height: var(--ck-todo-list-checkmark-size);
    vertical-align: middle;
    border: 0;
    left: -25px;
    margin-right: -15px;
    right: 0;
    margin-left: 0;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list .todo-list__label > input::before {
    display: block;
    position: absolute;
    box-sizing: border-box;
    content: '';
    width: 100%;
    height: 100%;
    border: 1px solid #333333;
    border-radius: 2px;
    transition: 250ms ease-in-out box-shadow, 250ms ease-in-out background,=
 250ms ease-in-out border;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list .todo-list__label > input::after {
    display: block;
    position: absolute;
    box-sizing: content-box;
    pointer-events: none;
    content: '';
    left: calc( var(--ck-todo-list-checkmark-size) / 3 );
    top: calc( var(--ck-todo-list-checkmark-size) / 5.3 );
    width: calc( var(--ck-todo-list-checkmark-size) / 5.3 );
    height: calc( var(--ck-todo-list-checkmark-size) / 2.6 );
    border-style: solid;
    border-color: transparent;
    border-width: 0 calc( var(--ck-todo-list-checkmark-size) / 8 ) calc( va=
r(--ck-todo-list-checkmark-size) / 8 ) 0;
    transform: rotate(45deg);
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list .todo-list__label > input[checked]::before {
    background: #26ab33;
    border-color: #26ab33;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list .todo-list__label > input[checked]::after {
    border-color: #ffffff;
}
/* ckeditor5-list/theme/todolist.css */
.ck-content .todo-list .todo-list__label .todo-list__label__description {
    vertical-align: middle;
}
/* ckeditor5-code-block/theme/codeblock.css */
.ck-content pre {
    padding: 1em;
    color: #353535;
    background: #c7c7c7;
    border: 1px solid #c4c4c4;
    border-radius: 2px;
    text-align: left;
    direction: ltr;
    tab-size: 4;
    white-space: pre-wrap;
    font-style: normal;
    min-width: 200px;
}
/* ckeditor5-code-block/theme/codeblock.css */
.ck-content pre code {
    background: unset;
    padding: 0;
    border-radius: 0;
}
/* ckeditor5-mention/theme/mention.css */
.ck-content .mention {
    background: var(--ck-color-mention-background);
    color: var(--ck-color-mention-text);
}
@media print {
    /* ckeditor5-page-break/theme/pagebreak.css */
    .ck-content .page-break {
        padding: 0;
    }
    /* ckeditor5-page-break/theme/pagebreak.css */
    .ck-content .page-break::after {
        display: none;
    }
}
.ck-content figure.image {
    margin-left: 0;
}
.ck-content .image.image-style-block-align-right {
    margin-left: auto;
    margin-right: 0;
    float: none !important;
    display: table !important;
}
.ck-content .image.image-style-align-center {
    margin-left: auto;
    float: none !important;
    display: table !important;
}

p.MsoNormal, li.MsoNormal, div.MsoNormal {
    margin: 0;
}</style><div class=3D"ck-content" data-visena-message-id=3D"_VisenaEmail.6=
6.54f51e587b38c9cc.18fab4b4eb6@origo-test01.app.internal.visena.net_"><p cl=
ass=3D"visenaNormal">Hi, is there a way to prevent a user/role from SELECT-=
ing from certain system-tables?</p><p class=3D"visenaNormal">=C2=A0</p><p c=
lass=3D"visenaNormal">I'd like the contents of pg_{user,roles,database} to =
not be visible to all users.</p><p class=3D"visenaNormal">=C2=A0</p><p clas=
s=3D"visenaNormal">Thanks.</p><p class=3D"visenaNormal">=C2=A0</p><div clas=
s=3D"visena-email-signature" data-visena-message-id=3D"_VisenaEmail.66.54f5=
1e587b38c9cc.18fab4b4eb6@origo-test01.app.internal.visena.net_"><div><div><=
div>--</div><div><span style=3D"font-family:arial,helvetica,sans-serif;"><s=
trong>Andreas Joseph Krogh</strong></span></div><div><span style=3D"font-fa=
mily:arial,helvetica,sans-serif;">CTO / Partner</span> - Visena AS</div><di=
v><span style=3D"font-family:arial,helvetica,sans-serif;">Mobile: +47 909 5=
6 963</span></div><div><a href=3D"mailto:andreas@visena.com">andreas@visena=
.com</a></div><div><a href=3D"https://www.visena.com">www.visena.com</a></d=
iv><div style=3D"padding-top:5px;"><a href=3D"https://www.visena.com"><img =
alt=3D"" src=3D"cid:part_F1404601224053QSO0NX"></a></div></div></div></div>=
</div>
------=_Part_364566_912133674.1716565919282--

------=_Part_364565_1969159107.1716565919269
Content-Type: image/png
Content-Transfer-Encoding: base64
Content-Disposition: inline
Content-ID: <part_F1404601224053QSO0NX>

iVBORw0KGgoAAAANSUhEUgAAAIUAAAAYCAYAAADUIj6hAAAABHNCSVQICAgIfAhkiAAABzBJREFU
aEPtmNFxHDcMhmVP3i1VECpvnjzkVIHWFfhcgVcVRKrAUgWRK/C6Al8H3lTgy0PGbzFdQc4VJP/H
ADs43q6kROeJNbOYgQACIAgCWJKng4MZ5gxUGXh0U0b+SIuF9G+EWXj2Q15vbrE/NPtk9uub7Gfd
t5mBx1NhqSEo8HshjbEUtlO2yIM9tsx5dZP9rPt2MzDZFAqZE4LGcFjdsg3saQaHt7fY70X949On
aS+OZidDBkavD33157L4xaw2os+Mp/DAC10l2XhOCeStj0W5ajrJL8WfCi80Xgf9vVlrhg9yRONe
/f7xI2vNsIcM7JwU9o6oGyJrLT8JOA1aX9sKP4wl94bAniukEbo/n7YPmuTETzIab4Y9ZWCrKexd
8M58lxPCvvD6aihfvexbEQoPYO8NQRO0JnddGO6FJYaVsBde7cXj7KRk4LsqDxQzCYeGsJNgaXZe
+JXkyGgWINq3Gp+bHNILz+wEYs5qH1eJrouNrpDXtk4O6x1IvtD40GWyJYYdkF0jIbYZlN16xygI
gl9smbMDsmFdfAKb23xGB8H/mv3tOJfArs1kukk79DEPdQ5u0g1vCvvqKXIW8mZYW+F3Tg4r8HvZ
kQCCLydK8EFMQCe5N8RgL9mRG0SqQFuNvdE6beSs0qPDBuCdg0+gvClso8SbTO4ki7mQzQqBrcMH
QPwReg2wW8umEe/+L8T/LEzBGF9nXjzZ46s+ITHvhegW8LL39xm6App7KYL/GE+vcYnFbJiP/0aY
hdiCnRC7jaj7eiK2ETInC5PRF6LYkSN0+HabF75WuT6syCyI0YkVGGMvUC33AmfZTDUEj8u6IVhu
EhRUJ2U2g6UlugyNb03Hl9obHwlxJbcRzcYjO4QPjVfGFTQav4vrmp7cpMp2qbHnBxWJbisbho2Q
XI6C1sIHDUFhH4Hij4UbIev66eANeiwbkA+LBsO36zAHzoXU7AhbqLAXEiOYTXcSdO8VS9L4wN8U
BIYhBd6oSUgYMijOkecRuTdQa/YiBXhbXFcnCnI2SrfeBG9NydrLYMhGHa5qB9pQIxlzAE6Okjzx
JO5afGe6kmhBicWKQNKuTZ5EW+MjQY8v/9rQ0bhJSJyNGUe/JH1t8h1iMbdSPAvxHYin6YmN9YBX
QmTYZZNh14vHhhhal5vtcIrJjmvszPRJdExH3MWHvykoBEc9CoCGWJisOLOGoCORs1FvIMbYA8z3
kwM59oemy6LlWrLxFLmWgiQAfEGd8S+NssbK+EhyGLxUkhhiy717waBqHOJYSEacwBejkFNhjJNj
v/gANOdQxPfciP/JVBCK2cOIcg3RRJ+CPrLPNVhhN6F38VKMF3XLlIJrjU5C8gMFxvKDvOcPc4rV
NjCn7KM0BV+161V8viSCuJZ8SITGJGEh7IUUlxOFMYUH1kJOCN4Wh+I5pqCuK01k40kSNtnKiKIl
UfxAgW5sU5JlS05rtt5YFJF1SWoqHv6BRgQcA4/bdb9WRjmMk3jyUMAbIoyJq9e4cVmgzKt9j5gN
J/aYDhk+hhjExwaPcz5PObA5Zd9bvz5UzCTZuZDidu5AchpiKSwPR+TV1bCWqBQ9nCjJ5neivC82
Nr4LeS2j1gw5LUqwBuhGQQU5UwHeSslXkwIynz2U2A2yKDgG7OffwLA3TpGRpk0Tzpj3ZEJXi/GR
a6GN0e0NtppChePdcAz1FTS+FN8Kpxoiykk+J8fC5tenjbu9kSqpHLu9jBrhUuhNwVGbpyZrzrl0
HPVD8SXj5EOOD/eDC64VjvYBZLuUbIVAfBN1t/C/SU+cAGtdGo+fVnzycUX5wmn6eCKPmWYJG2E/
ppTsuRCbvUD9fwquksG5GqLVKhzDQ3GrEyLKSXhsiK3T5j9EyxffCFOYi2wUlPyFFDQAhehESDjQ
GoX0ho0oj8RPou6TxHJdcT0NTcWkO0AnG7+uXsnHqcas/72wvWF+mSf7N/Watp9kTXoluzeS0fB9
9CcZ/hvhSZTfh99pispZOXL9KrGrARkNUMu9ITbScZWs7xOYNt9pwxSZtYDsX/GE3xTkrXgwAsXm
fud08FiTeC+m2/o7ppo+PTS/NBK5ARpDG5YHr++DpmVfreYdiX8mnp+DzPEG9WbqJON0JBenZofs
sxBA1gj5NXGvfJu/Qh7HwQh/VDUEyUxCit5hH94QfKkEdu+GwK8BX0hvCF+D67xhjmXQCXMwJCZ+
olK0A1EKRCE4snsh42w8Mv/Zhxw9iD7Cjo7CyQC/KyF6oBfShL4PYgG+CHsYKyZxvxZSZBAgjhIz
YDz+AbfD37GtbaoSKzgGt+lKfI/GZtay6vG4VXTpPsh+IcQhOk9I7WYeP5AM3HZ9+DaSGIp9HIuu
huC4pCGGx+YD2fcc5tfIAA0h/Et4/jX8zz4fWAasIf4UbR9Y6HO4d8jAnd4U0Y8ageuCB+c+H5R3
CHU2mTMwZ+B/y8DfSMBLLOYXVuEAAAAASUVORK5CYII=
------=_Part_364565_1969159107.1716565919269--

------=_Part_364564_1312231377.1716565919269--






From salahuddin.m@bitnine.net Fri May  15 23:24:02 2026
Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-general-owner+archive@lists.postgresql.org>)
	id 1sAXmd-00Ac20-0u
	for pgsql-general@arkaria.postgresql.org; Fri, 24 May 2024 16:28:45 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-general-owner+archive@lists.postgresql.org>)
	id 1sAXma-0070ph-K7
	for pgsql-general@arkaria.postgresql.org; Fri, 24 May 2024 16:28:40 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <salahuddin.m@bitnine.net>)
	id 1sAXma-0070pZ-3R
	for pgsql-general@lists.postgresql.org; Fri, 24 May 2024 16:28:40 +0000
Received: from mail-lf1-x135.google.com ([2a00:1450:4864:20::135])
	by magus.postgresql.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.94.2)
	(envelope-from <salahuddin.m@bitnine.net>)
	id 1sAXmV-000ZDW-6Y
	for pgsql-general@lists.postgresql.org; Fri, 24 May 2024 16:28:38 +0000
Received: by mail-lf1-x135.google.com with SMTP id 2adb3069b0e04-529644ec0ebso1569431e87.3
        for <pgsql-general@lists.postgresql.org>; Fri, 24 May 2024 09:28:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=bitnine-net.20230601.gappssmtp.com; s=20230601; t=1716568114; x=1717172914; darn=lists.postgresql.org;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=v2GSiCVZdXsRieONJrPSVHas32bDqrj3X4LBAiZhdNE=;
        b=Sx9IBk2zNPLbCab3ogc1Xn87ikg7pjgNWhi/kKj7tHOroE4fw1uPiemRbhX+ZYNsMl
         HG0dl+TYJLc720aZ1bItoorsFIzrJMS6TdbwHwvZ/qGqxjvxkHGA8hFg3TJq9Kqy1oZC
         J8iEeX20A559EjgWP2wXJeb3pSuDDX/dEg+pNWE4gTWo2HjtyoaiUYcszKkzZLrVel92
         OF6MvNuPd63ZvB3pG/HSGHWb+Kizy2dbtukNdX/xJCSxtolb1RzBofwGGDqtB5fsiMlr
         pE1hdzO2CV71zPxKrB5UZ7p1xdKO7uN1TD3jATrrbGbLFP1kGlpYE3t/pYmiKP7IDwXn
         s9MQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1716568114; x=1717172914;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=v2GSiCVZdXsRieONJrPSVHas32bDqrj3X4LBAiZhdNE=;
        b=JzSTXtE35Ob14XzAJG6qINshig4/A8QCOAhdTTKcqp6sz3FGmwOwAOGVw7LMjyAhfQ
         22DBcGrst9pRD4quP+vzY3rGsfzyHfhdCmVKdT1KkznZWkeJPCDpOCpfcVVcfnkC+4Eq
         VB5BOoQ/QcaC428fLcvbd0vcRjkfg/51Qi1BHwvdKBu9G9qsA48bWNZVFuC/Y4dAfE1q
         NSq5jgPDEVTEb60yzwCv8mHM/CHGDbk/FxYvmrugJehvSd4ALcj0kbkfTAa1NOee7C55
         rsvnCy9/9nOhexRmV1gBk/qywoUEhPmRdi7INMj5ZhpcvSKFRoxNsbABcLOFXgzSUK/P
         S7Xw==
X-Gm-Message-State: AOJu0YxXk/50WBzKu9YPU5Kuq8zhzdcXTRE2coYxowrxMHt6bvtQFkKc
	P0qQ45z1lbSfW+1jG7ZpGq8BAqk6i+CaP9APGX0wpgchgR6rm2pKEahKQ5BY9LqNp/glKEANYsY
	I60n5GveeA1FXXh8b3GVBttWwwIYsYj9enu7ewJudZnEMPPg951U=
X-Google-Smtp-Source: AGHT+IHfCfLMOk/BF/MIhg7z6aD5rBWOBG5puRbIZuzHnx6YTQLqn+sLaeT5QHr4qD542gdB0Qipj7f3fKWYp4ipYmI=
X-Received: by 2002:a05:6512:3107:b0:51b:528e:ce7d with SMTP id
 2adb3069b0e04-52966005b6emr2089915e87.34.1716568113763; Fri, 24 May 2024
 09:28:33 -0700 (PDT)
MIME-Version: 1.0
References: <VisenaEmail.66.54f51e587b38c9cc.18fab4b4eb6@origo-test01.app.internal.visena.net>
In-Reply-To: <VisenaEmail.66.54f51e587b38c9cc.18fab4b4eb6@origo-test01.app.internal.visena.net>
From: Muhammad Salahuddin Manzoor <salahuddin.m@bitnine.net>
Date: Fri, 24 May 2024 21:28:20 +0500
Message-ID: <CAKD7CD=-RiQQq+Q-zC8cP5hmfG6icj1cUT0Ebx8a=gwyp=dR1w@mail.gmail.com>
Subject: Re: prevent users from SELECT-ing from pg_roles/pg_database
To: Andreas Joseph Krogh <andreas@visena.com>
Cc: pgsql-general <pgsql-general@lists.postgresql.org>
Content-Type: multipart/related; boundary="000000000000a795cc061935a843"
List-Id: <pgsql-general.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-general@lists.postgresql.org>
List-Owner: <mailto:pgsql-general-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-general>
Archived-At: <https://www.postgresql.org/message-id/CAKD7CD%3D-RiQQq%2BQ-zC8cP5hmfG6icj1cUT0Ebx8a%3Dgwyp%3DdR1w%40mail.gmail.com>
Precedence: bulk

--000000000000a795cc061935a843
Content-Type: multipart/alternative; boundary="000000000000a795ca061935a842"

--000000000000a795ca061935a842
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Greetings,

To prevent a user or role from selecting data from certain system tables in
PostgreSQL, you can revoke the default select permissions on those tables.
Here=E2=80=99s how you can do it:

   1. Revoke SELECT permission on the system tables from the public role.
   2. Grant SELECT permission only to specific roles that need it.

Here=E2=80=99s a step-by-step guide on how to achieve this:

Salahuddin.

On Fri, 24 May 2024, 20:52 Andreas Joseph Krogh, <andreas@visena.com> wrote=
:

> Hi, is there a way to prevent a user/role from SELECT-ing from certain
> system-tables?
>
>
>
> I'd like the contents of pg_{user,roles,database} to not be visible to al=
l
> users.
>
>
>
> Thanks.
>
>
> --
> *Andreas Joseph Krogh*
> CTO / Partner - Visena AS
> Mobile: +47 909 56 963
> andreas@visena.com
> www.visena.com
> <https://www.visena.com>
>

--000000000000a795ca061935a842
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div>Greetings,</div><div dir=3D"auto"><br></div><div dir=
=3D"auto"><p style=3D"border:0px solid rgb(227,227,227);margin:0px 0px 1.25=
em;color:rgb(13,13,13);font-family:ui-sans-serif,-apple-system,&quot;system=
-ui&quot;,&quot;segoe ui&quot;,roboto,ubuntu,cantarell,&quot;noto sans&quot=
;,sans-serif,helvetica,&quot;apple color emoji&quot;,arial,&quot;segoe ui e=
moji&quot;,&quot;segoe ui symbol&quot;;font-size:16px;background-color:rgb(=
255,255,255)">To prevent a user or role from selecting data from certain sy=
stem tables in PostgreSQL, you can revoke the default select permissions on=
 those tables. Here=E2=80=99s how you can do it:</p><ol style=3D"border:0px=
 solid rgb(227,227,227);list-style-position:initial;margin:1.25em 0px;paddi=
ng:0px 0px 0px 1.625em;color:rgb(13,13,13);font-family:ui-sans-serif,-apple=
-system,&quot;system-ui&quot;,&quot;segoe ui&quot;,roboto,ubuntu,cantarell,=
&quot;noto sans&quot;,sans-serif,helvetica,&quot;apple color emoji&quot;,ar=
ial,&quot;segoe ui emoji&quot;,&quot;segoe ui symbol&quot;;font-size:16px;b=
ackground-color:rgb(255,255,255)"><li style=3D"border:0px solid rgb(227,227=
,227);margin-bottom:0.5em;margin-top:0.5em;padding-left:0.375em"><span styl=
e=3D"border:0px solid rgb(227,227,227);font-weight:600;margin-top:1.25em;ma=
rgin-bottom:1.25em">Revoke SELECT permission on the system tables from the =
public role.</span></li><li style=3D"border:0px solid rgb(227,227,227);marg=
in-bottom:0.5em;margin-top:0.5em;padding-left:0.375em"><span style=3D"borde=
r:0px solid rgb(227,227,227);font-weight:600;margin-top:1.25em;margin-botto=
m:1.25em">Grant SELECT permission only to specific roles that need it.</spa=
n></li></ol><p style=3D"border:0px solid rgb(227,227,227);margin:1.25em 0px=
;color:rgb(13,13,13);font-family:ui-sans-serif,-apple-system,&quot;system-u=
i&quot;,&quot;segoe ui&quot;,roboto,ubuntu,cantarell,&quot;noto sans&quot;,=
sans-serif,helvetica,&quot;apple color emoji&quot;,arial,&quot;segoe ui emo=
ji&quot;,&quot;segoe ui symbol&quot;;font-size:16px;background-color:rgb(25=
5,255,255)">Here=E2=80=99s a step-by-step guide on how to achieve this:</p>=
</div><div><br></div><div data-smartmail=3D"gmail_signature">Salahuddin.</d=
iv></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_att=
r">On Fri, 24 May 2024, 20:52 Andreas Joseph Krogh, &lt;<a href=3D"mailto:a=
ndreas@visena.com">andreas@visena.com</a>&gt; wrote:<br></div><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;=
padding-left:1ex"><div><p>Hi, is there a way to prevent a user/role from SE=
LECT-ing from certain system-tables?</p><p>=C2=A0</p><p>I&#39;d like the co=
ntents of pg_{user,roles,database} to not be visible to all users.</p><p>=
=C2=A0</p><p>Thanks.</p><p>=C2=A0</p><div><div><div><div>--</div><div><span=
 style=3D"font-family:arial,helvetica,sans-serif"><strong>Andreas Joseph Kr=
ogh</strong></span></div><div><span style=3D"font-family:arial,helvetica,sa=
ns-serif">CTO / Partner</span> - Visena AS</div><div><span style=3D"font-fa=
mily:arial,helvetica,sans-serif">Mobile: +47 909 56 963</span></div><div><a=
 href=3D"mailto:andreas@visena.com" target=3D"_blank" rel=3D"noreferrer">an=
dreas@visena.com</a></div><div><a href=3D"https://www.visena.com" target=3D=
"_blank" rel=3D"noreferrer">www.visena.com</a></div><div style=3D"padding-t=
op:5px"><a href=3D"https://www.visena.com" target=3D"_blank" rel=3D"norefer=
rer"><img alt=3D"" src=3D"cid:part_F1404601224053QSO0NX"></a></div></div></=
div></div></div></blockquote></div>

--000000000000a795ca061935a842--
--000000000000a795cc061935a843
Content-Type: image/png; name=noname
Content-Disposition: inline; filename=noname
Content-Transfer-Encoding: base64
Content-ID: <ii_18fab6dbd90c204bfcc1>
X-Attachment-Id: ii_18fab6dbd90c204bfcc1
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--000000000000a795cc061935a843
Content-Type: image/png; name=noname
Content-Disposition: inline; filename=noname
Content-Transfer-Encoding: base64
Content-ID: <>
X-Attachment-Id: 
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--000000000000a795cc061935a843--