I posted this in Devshed forums
(here<http://forums.devshed.com/postgresql-help-21/revoking-table-create-privileges-926853.html>)
but no one seems to be responding. Hopefully someone here can help.

How do I keep a user from being able to create tables in the public schema?

I have tried REVOKE CREATE FROM username ON SCHEMA PUBLIC but they can
still create tables.
The user has no special attributes and is not a member of another role.

mjacobson@zeus=>[local]:ises=> \dn+ public
                          List of schemas
  Name  |  Owner   |  Access privileges   |      Description
--------+----------+----------------------+------------------------
 public | postgres | postgres=UC/postgres+| standard public schema
        |          | =UC/postgres        +|
        |          | webuser=U/postgres   |
(1 row)

mjacobson@zeus=>[local]:ises=> select current_user;
 current_user
--------------
 mjacobson
(1 row)

mjacobson@zeus=>[local]:ises=> \du+ mjacobson
                  List of roles
 Role name | Attributes | Member of | Description
-----------+------------+-----------+-------------
 mjacobson |            | {}        |

mjacobson@zeus=>[local]:ises=> create table tb_foo(i int);
CREATE TABLE
mjacobson@zeus=>[local]:ises=> drop table tb_foo;
DROP TABLE


-- 
Moshe Jacobson
Nead Werx, Inc. | Senior Systems Engineer
2323 Cumberland Parkway, Suite 201 | Atlanta, GA 30339
mo...@neadwerx.com | www.neadwerx.com

Reply via email to