X-Original-To: pgsql-sql-postgresql.org@postgresql.org Received: from localhost (mx1.hub.org [200.46.208.251]) by postgresql.org (Postfix) with ESMTP id 193089FA7B6 for ; Thu, 20 Jul 2006 17:35:09 -0300 (ADT) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024) with ESMTP id 66834-01-5 for ; Thu, 20 Jul 2006 17:34:56 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey- Received: from megazone.bigpanda.com (megazone.bigpanda.com [64.147.171.210]) by postgresql.org (Postfix) with ESMTP id 5B2859FB90B for ; Thu, 20 Jul 2006 17:17:12 -0300 (ADT) Received: by megazone.bigpanda.com (Postfix, from userid 1001) id 80BB935381; Thu, 20 Jul 2006 13:17:10 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by megazone.bigpanda.com (Postfix) with ESMTP id 726FC35380; Thu, 20 Jul 2006 13:17:10 -0700 (PDT) Date: Thu, 20 Jul 2006 13:17:10 -0700 (PDT) From: Stephan Szabo To: Hilary Forbes Cc: pgsql-sql@postgresql.org Subject: Re: Help with privilages please In-Reply-To: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk> Message-ID: <20060720131417.A89811@megazone.bigpanda.com> References: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests= X-Spam-Level: X-Archive-Number: 200607/264 X-Sequence-Number: 25838 On Thu, 20 Jul 2006, Hilary Forbes wrote: > Dear All > > We are running pg v 7.4.1 and importantly the database has been > converted from earlier versions of pg (6.5 I seem to recall). > > I have an existing table suppliers and I have created a new user 'hilary' > > REVOKE ALL on TABLE suppliers FROM hilary; > > now login as hilary > SELECT * from suppliers; > and I get all the records!!! This probably means that "public" also has rights on suppliers (and thus, the user still has access through the public permissions). You can probably get around this by revoking the public rights and granting rights explicitly to the users that should have rights.