X-Original-To: pgsql-sql-postgresql.org@postgresql.org
Received: from localhost (mx1.hub.org [200.46.208.251])
	by postgresql.org (Postfix) with ESMTP id 29DEE9FA6AF
	for <pgsql-sql-postgresql.org@postgresql.org>;
	Fri, 21 Jul 2006 09:40:16 -0300 (ADT)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024)
	with ESMTP id 52105-07 for <pgsql-sql-postgresql.org@postgresql.org>;
	Fri, 21 Jul 2006 09:40:06 -0300 (ADT)
X-Greylist: from auto-whitelisted by SQLgrey-
Received: from tamar.dmr.co.uk (tamar.dmr.co.uk [195.112.52.166])
	by postgresql.org (Postfix) with ESMTP id F310A9FA42F
	for <pgsql-sql@postgresql.org>; Fri, 21 Jul 2006 09:40:05 -0300 (ADT)
Received: from HFPORT.dmr.co.uk (pennsoft.gotadsl.co.uk [81.6.232.68])
	by tamar.dmr.co.uk (8.13.5/8.13.5) with ESMTP id k6LCe2c6022566
	for <pgsql-sql@postgresql.org>; Fri, 21 Jul 2006 13:40:02 +0100
Message-Id: <5.1.0.14.0.20060721133547.040c0e28@mailserver.dmr.co.uk>
X-Sender: hf1@mailserver.dmr.co.uk
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Fri, 21 Jul 2006 13:45:16 +0100
To: pgsql-sql@postgresql.org
From: Hilary Forbes <hforbes@dmr.co.uk>
Subject: System catalog table privileges
Mime-Version: 1.0
Content-Type: text/html; charset="us-ascii"
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=1.488 tagged_above=0 required=5
	tests=FORGED_RCVD_HELO, HTML_10_20, HTML_MESSAGE, MIME_HTML_ONLY
X-Spam-Level: *
X-Archive-Number: 200607/273
X-Sequence-Number: 25847

<html>
Dear All<br><br>
Next question on privileges!&nbsp; Can I safely remove all privileges
from the system catalog tables for a user and still enable them to select
from the public schema?&nbsp; I guess the real question is what access
rights does an ordinary user have to have to the system catalog tables in
order for postgres to work properly given I only ever want the user to be
able to SELECT from views.<br><br>
This is all brought about by a user who wants to use MS Access Query for
adhoc queries to a (small) database via ODBC.&nbsp; (the database itself
drives a major web application.) I can't find an easy way of preventing
them seeing that tables exist but I don't want them trying to manually
update any tables of mine or postgres's thank you very much!&nbsp; (Don't
shoot the messenger - there's no accounting for user's tastes!)<br><br>
TAI<br>
Hilary<br>
<x-sigsep><p></x-sigsep>
Hilary Forbes<br>
DMR Limited (UK registration 01134804) <br>
A DMR Information and Technology Group company
(<a href="http://www.dmr.co.uk/" eudora="autourl"><font color="#0000FF"><u>www.dmr.co.uk</a></u></font>)
<br>
Direct tel 01689 889950 Fax 01689 860330 <br>
DMR is a UK registered trade mark of DMR Limited<br>
**********************************************************</html>