X-Original-To: pgsql-sql-postgresql.org@postgresql.org
Received: from localhost (mx1.hub.org [200.46.208.251])
	by postgresql.org (Postfix) with ESMTP id B8AFE9FA64B
	for <pgsql-sql-postgresql.org@postgresql.org>;
	Wed, 26 Jul 2006 16:30:16 -0300 (ADT)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024)
	with ESMTP id 41512-03 for <pgsql-sql-postgresql.org@postgresql.org>;
	Wed, 26 Jul 2006 16:30:04 -0300 (ADT)
X-Greylist: from auto-whitelisted by SQLgrey-
Received: from floppy.pyrenet.fr (floppy.pyrenet.fr [194.116.145.2])
	by postgresql.org (Postfix) with ESMTP id 318A59FA4E0
	for <pgsql-sql@postgresql.org>; Wed, 26 Jul 2006 16:30:05 -0300 (ADT)
Received: by floppy.pyrenet.fr (Postfix, from userid 106)
	id 37FFA30E22; Wed, 26 Jul 2006 21:30:03 +0200 (MET DST)
From: "Andrew Hammond" <andrew.george.hammond@gmail.com>
X-Newsgroups: pgsql.sql
Subject: Re: Help with privilages please
Date: 26 Jul 2006 12:29:56 -0700
Organization: http://groups.google.com
Lines: 50
Message-ID: <1153942196.315797.27900@75g2000cwc.googlegroups.com>
References: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk>
	<5.1.0.14.0.20060721130134.04304e38@mailserver.dmr.co.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Complaints-To: groups-abuse@google.com
In-Reply-To: <5.1.0.14.0.20060721130134.04304e38@mailserver.dmr.co.uk>
User-Agent: G2/0.2
X-HTTP-UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US;
	rv:1.8.0.4) Gecko/20060608 Ubuntu/dapper-security
	Firefox/1.5.0.4,gzip(gfe),gzip(gfe)
Complaints-To: groups-abuse@google.com
Injection-Info: 75g2000cwc.googlegroups.com; posting-host=207.219.45.62;
	posting-account=cSUlcA0AAABWACaPjo2Z9C0GBLTio512
To: pgsql-sql@postgresql.org
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=0.01 tagged_above=0 required=5 tests=AWL
X-Spam-Level: 
X-Archive-Number: 200607/321
X-Sequence-Number: 25895

7.4.1 is quite old and has a number of serious known bugs. I'd suggest
you either upgrade to 8.1.4 (current) or, if you can't do that, at
least upgrade to 7.4.13 (latest 7.4) immediately.


Hilary Forbes wrote:
> Tom
>
>  Thank you - I think that the underlying problem is that I was trying out
>
>  REVOKE ALL FROM TABLE suppliers FOR public;
>
>  then connect as hilary and I can still see the table rows.
>
>  I appear to have to revoke each type eg
>  REVOKE SELECT FROM TABLE suppliers FOR public;
>  etc and then the code works.
>
>  Is this a known bug in this version (7.4.1)?
>
>  Thanks
>  Hilary
>
>
>  At 18:08 20/07/2006 -0400, Tom Lane wrote:
>
>  Hilary Forbes <hforbes@dmr.co.uk> writes:
>  > I have an existing table suppliers and I have created a new user
>  > 'hilary'<br><br>
>  > REVOKE ALL on TABLE suppliers FROM hilary;<br><br>
>  > now login as hilary<br>
>  > SELECT * from suppliers;<br>
>  > and I get all the records!!!<br><br>
>
>  Most likely there's been a grant of (at least) select privilege to PUBLIC.
>  You'll need to revoke that if you don't want every user to have that
>  privilege implicitly.
>
>                          regards, tom lane
>
>  ---------------------------(end of broadcast)---------------------------
>  TIP 6: explain analyze is your friend
>
>  Hilary Forbes
>  DMR Limited (UK registration 01134804)
>  A DMR Information and Technology Group company (_www.dmr.co.uk_)
>  Direct tel 01689 889950 Fax 01689 860330
>  DMR is a UK registered trade mark of DMR Limited
>  **********************************************************