pg.ddx.io pgsql-sql@postgresql.org mailing list archive
help / color / mirror / Atom feedPermissions problem on 7.4
2+ messages / 2 participants
[nested] [flat]
* Permissions problem on 7.4
@ 2003-11-30 10:21 Michalis Kabrianis <mk@interzone.gr>
0 siblings, 1 reply; 2+ messages in thread
From: Michalis Kabrianis @ 2003-11-30 10:21 UTC (permalink / raw)
To: pgsql-sql
Hi
I hope this is the correct list to ask about a permissions problem I have.
I create a schema named cust, a table named clients, and a group named
salesmen.
I use:
REVOKE ALL ON SCHEMA cust FROM PUBLIC;
GRANT USAGE ON SCHEMA cust TO GROUP salesmen;
REVOKE ALL ON TABLE clients FROM PUBLIC;
GRANT SELECT ON TABLE clients TO GROUP salesmen;
then I do a :
\dp clients
and get:
Access privileges for database "custdb"
Schema | Table | Access
privileges
---------+---------+-------------------------------------------------------------------------------------------------
cust | clients | {admin=a*r*w*d*R*x*t*/cust,"group salesmen=r/cust"}
The problem is that when I check from within my application if a member
of the group salesmen has permissions to INSERT into the group clients,
I get an affirmative question.
I guessed it was a problem with my application, so I downloaded
postgresql_autodoc (http://www.rbt.ca/autodoc/) in order to check the
permissions better.
It also claims that group salesmen has the right to SELECT, INSERT and
DELETE on table clients.
I tried :
revoke insert on clients from group salesmen;
and nothing changed
I tried :
revoke all on clients from group salesmen;
and every permission was revoked.
Then I tried again:
GRANT SELECT ON TABLE clients TO GROUP salesmen;
and all three permissions (insert, select, delete) are back in place.
All these happen with postgresql 7.4 on linux
Is there something I'm doing wrong, something I don't understand or have
I hit a bug?
Thanks in advance
Michalis Kabrianis
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Permissions problem on 7.4
@ 2003-12-01 20:48 Peter Eisentraut <peter_e@gmx.net>
parent: Michalis Kabrianis <mk@interzone.gr>
0 siblings, 0 replies; 2+ messages in thread
From: Peter Eisentraut @ 2003-12-01 20:48 UTC (permalink / raw)
To: Michalis Kabrianis <mk@interzone.gr>; +Cc: pgsql-sql
Michalis Kabrianis writes:
> Schema | Table | Access
> privileges
> ---------+---------+-------------------------------------------------------------------------------------------------
> cust | clients | {admin=a*r*w*d*R*x*t*/cust,"group salesmen=r/cust"}
>
>
> The problem is that when I check from within my application if a member
> of the group salesmen has permissions to INSERT into the group clients,
> I get an affirmative question.
Fix your application.
> I guessed it was a problem with my application, so I downloaded
> postgresql_autodoc (http://www.rbt.ca/autodoc/) in order to check the
> permissions better.
> It also claims that group salesmen has the right to SELECT, INSERT and
> DELETE on table clients.
Report a bug to the authors of that program.
--
Peter Eisentraut peter_e@gmx.net
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2003-12-01 20:48 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2003-11-30 10:21 Permissions problem on 7.4 Michalis Kabrianis <mk@interzone.gr>
2003-12-01 20:48 ` Peter Eisentraut <peter_e@gmx.net>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox