From: Tom Lane <tgl@sss.pgh.pa.us>
To: Hilary Forbes <hforbes@dmr.co.uk>
Cc: pgsql-sql@postgresql.org
Subject: Re: Help with privilages please
Date: Thu, 20 Jul 2006 18:08:58 -0400
Message-ID: <10087.1153433338@sss.pgh.pa.us> (raw)
In-Reply-To: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk>
References: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk>
Hilary Forbes <hforbes@dmr.co.uk> writes:
> I have an existing table suppliers and I have created a new user
> 'hilary'<br><br>
> REVOKE ALL on TABLE suppliers FROM hilary;<br><br>
> now login as hilary<br>
> SELECT * from suppliers;<br>
> and I get all the records!!!<br><br>
Most likely there's been a grant of (at least) select privilege to PUBLIC.
You'll need to revoke that if you don't want every user to have that
privilege implicitly.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: tgl@sss.pgh.pa.us, hforbes@dmr.co.uk
Subject: Re: Help with privilages please
In-Reply-To: <10087.1153433338@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox