From: Andrew Hammond <andrew.george.hammond@gmail.com>
To: pgsql-sql@postgresql.org
Subject: Re: Help with privilages please
Date: 26 Jul 2006 12:29:56 -0700
Message-ID: <1153942196.315797.27900@75g2000cwc.googlegroups.com> (raw)
In-Reply-To: <5.1.0.14.0.20060721130134.04304e38@mailserver.dmr.co.uk>
References: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk>
<5.1.0.14.0.20060721130134.04304e38@mailserver.dmr.co.uk>
7.4.1 is quite old and has a number of serious known bugs. I'd suggest
you either upgrade to 8.1.4 (current) or, if you can't do that, at
least upgrade to 7.4.13 (latest 7.4) immediately.
Hilary Forbes wrote:
> Tom
>
> Thank you - I think that the underlying problem is that I was trying out
>
> REVOKE ALL FROM TABLE suppliers FOR public;
>
> then connect as hilary and I can still see the table rows.
>
> I appear to have to revoke each type eg
> REVOKE SELECT FROM TABLE suppliers FOR public;
> etc and then the code works.
>
> Is this a known bug in this version (7.4.1)?
>
> Thanks
> Hilary
>
>
> At 18:08 20/07/2006 -0400, Tom Lane wrote:
>
> Hilary Forbes <hforbes@dmr.co.uk> writes:
> > I have an existing table suppliers and I have created a new user
> > 'hilary'<br><br>
> > REVOKE ALL on TABLE suppliers FROM hilary;<br><br>
> > now login as hilary<br>
> > SELECT * from suppliers;<br>
> > and I get all the records!!!<br><br>
>
> Most likely there's been a grant of (at least) select privilege to PUBLIC.
> You'll need to revoke that if you don't want every user to have that
> privilege implicitly.
>
> regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 6: explain analyze is your friend
>
> Hilary Forbes
> DMR Limited (UK registration 01134804)
> A DMR Information and Technology Group company (_www.dmr.co.uk_)
> Direct tel 01689 889950 Fax 01689 860330
> DMR is a UK registered trade mark of DMR Limited
> **********************************************************
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: andrew.george.hammond@gmail.com
Subject: Re: Help with privilages please
In-Reply-To: <1153942196.315797.27900@75g2000cwc.googlegroups.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox