X-Original-To: pgsql-sql-postgresql.org@postgresql.org Received: from localhost (mx1.hub.org [200.46.208.251]) by postgresql.org (Postfix) with ESMTP id 7CDF79FA4A7 for ; Wed, 19 Jul 2006 12:18:37 -0300 (ADT) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024) with ESMTP id 18934-06 for ; Wed, 19 Jul 2006 12:18:29 -0300 (ADT) X-Greylist: domain auto-whitelisted by SQLgrey- Received: from web31811.mail.mud.yahoo.com (web31811.mail.mud.yahoo.com [68.142.207.74]) by postgresql.org (Postfix) with SMTP id CCEE79FA47F for ; Wed, 19 Jul 2006 12:18:28 -0300 (ADT) Received: (qmail 19818 invoked by uid 60001); 19 Jul 2006 15:18:28 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=1whRLKrkgR/6sOQYh1UYqZL0U68O2KVljjveeuV5m0aKl3ViMhB5+y6WLcppEsE9DIL+/kP4nwuY22z8iW22hIx9zZwuxKvJYGFB+Yc2Kp63l2NPA6Mz8KlOwXMQTUFPkJtpFWc9imggMuQkPi6d4tsBl1XbTdy3lB4rEFtVqR8= ; Message-ID: <20060719151827.19816.qmail@web31811.mail.mud.yahoo.com> Received: from [65.211.203.86] by web31811.mail.mud.yahoo.com via HTTP; Wed, 19 Jul 2006 08:18:27 PDT Date: Wed, 19 Jul 2006 08:18:27 -0700 (PDT) From: Richard Broersma Jr Subject: Re: User Permission To: Aaron Bono , sathish kumar shanmugavelu Cc: pgsql-sql@postgresql.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.756 tagged_above=0 required=5 tests=BAYES_00, DNS_FROM_RFC_ABUSE, DNS_FROM_RFC_POST, DNS_FROM_RFC_WHOIS X-Spam-Level: X-Archive-Number: 200607/254 X-Sequence-Number: 25828 > > Dear group, > > i created a user named 'dataviewer' and grant only select permission to > > that user, > > but now the user could able to create tables. how to restrict this, > > i want to give permission to create views and do selects on tables and > > views. > > how to do it? > > plz help. > Have your checked > http://www.postgresql.org/docs/8.1/interactive/sql-grant.html > http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html > I would start by creating a role: > http://www.postgresql.org/docs/8.1/interactive/user-manag.html > And revoke all on it. Then add only the permissions it needs and assign the > role to the user. Also, one additional point would be to revoke all from public as mentioned in the following thread: http://archives.postgresql.org/pgsql-general/2006-07/msg00148.php Apparently, whatever privileges 'pubic' has are extended to the privileges of the individual users. Regards, Richard Broersma Jr.