X-Original-To: pgsql-sql-postgresql.org@postgresql.org
Received: from localhost (wm.hub.org [200.46.204.128])
	by postgresql.org (Postfix) with ESMTP id 3183F9FA6AF
	for <pgsql-sql-postgresql.org@postgresql.org>;
	Fri, 21 Jul 2006 09:00:06 -0300 (ADT)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.204.128]) (amavisd-new, port 10024)
	with ESMTP id 19902-05 for <pgsql-sql-postgresql.org@postgresql.org>;
	Fri, 21 Jul 2006 11:59:58 +0000 (UTC)
X-Greylist: delayed 22:02:50.614635 by SQLgrey-
Received: from tamar.dmr.co.uk (tamar.dmr.co.uk [195.112.52.166])
	by postgresql.org (Postfix) with ESMTP id E79DD9FA50D
	for <pgsql-sql@postgresql.org>; Fri, 21 Jul 2006 08:59:57 -0300 (ADT)
Received: from HFPORT.dmr.co.uk (pennsoft.gotadsl.co.uk [81.6.232.68])
	by tamar.dmr.co.uk (8.13.5/8.13.5) with ESMTP id k6LBxqAL017421;
	Fri, 21 Jul 2006 12:59:52 +0100
Message-Id: <5.1.0.14.0.20060721130134.04304e38@mailserver.dmr.co.uk>
X-Sender: hf1@mailserver.dmr.co.uk
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Fri, 21 Jul 2006 13:05:06 +0100
To: Tom Lane <tgl@sss.pgh.pa.us>
From: Hilary Forbes <hforbes@dmr.co.uk>
Subject: Re: Help with privilages please 
Cc: pgsql-sql@postgresql.org
In-Reply-To: <10087.1153433338@sss.pgh.pa.us>
References: <5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk>
	<5.1.0.14.0.20060720145514.03833140@mailserver.dmr.co.uk>
Mime-Version: 1.0
Content-Type: text/html; charset="us-ascii"
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=0.511 tagged_above=0 required=5
	tests=FORGED_RCVD_HELO, HTML_30_40, HTML_MESSAGE, MIME_HTML_ONLY
X-Spam-Level: 
X-Archive-Number: 200607/272
X-Sequence-Number: 25846

<html>
Tom<br><br>
Thank you - I think that the underlying problem is that I was trying
out<br><br>
REVOKE ALL FROM TABLE suppliers FOR public;<br><br>
then connect as hilary and I can still see the table rows.<br><br>
I appear to have to revoke each type eg<br>
REVOKE SELECT FROM TABLE suppliers FOR public;<br>
etc and then the code works.<br><br>
Is this a known bug in this version (7.4.1)?<br><br>
Thanks<br>
Hilary<br><br>
<br>
At 18:08 20/07/2006 -0400, Tom Lane wrote:<br><br>
<blockquote type=cite class=cite cite>Hilary Forbes
&lt;hforbes@dmr.co.uk&gt; writes:<br>
&gt; I have an existing table suppliers and I have created a new
user<br>
&gt; 'hilary'&lt;br&gt;&lt;br&gt;<br>
&gt; REVOKE ALL on TABLE suppliers FROM hilary;&lt;br&gt;&lt;br&gt;<br>
&gt; now login as hilary&lt;br&gt;<br>
&gt; SELECT * from suppliers;&lt;br&gt;<br>
&gt; and I get all the records!!!&lt;br&gt;&lt;br&gt;<br><br>
Most likely there's been a grant of (at least) select privilege to
PUBLIC.<br>
You'll need to revoke that if you don't want every user to have 
that<br>
privilege implicitly.<br><br>
<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab>regards,
tom lane<br><br>
---------------------------(end of
broadcast)---------------------------<br>
TIP 6: explain analyze is your friend</blockquote>
<x-sigsep><p></x-sigsep>
Hilary Forbes<br>
DMR Limited (UK registration 01134804) <br>
A DMR Information and Technology Group company
(<a href="http://www.dmr.co.uk/" eudora="autourl"><font color="#0000FF"><u>www.dmr.co.uk</a></u></font>)
<br>
Direct tel 01689 889950 Fax 01689 860330 <br>
DMR is a UK registered trade mark of DMR Limited<br>
**********************************************************</html>