Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Juan Cuervo (Quality Telecom)
Hi Scott Thanks for your answer. It should be a way to prevent this from normal users who only need access to a set of tables, a view or even a store procedure. (Maybe a VIEW_SCHEMA privilege of roles?). View a table's structure should only be allowed to users who has at least one privilege

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Bob Lunney
Telecom) juanrcue...@quality-telecom.net To: Scott Marlowe scott.marl...@gmail.com Cc: pgsql-admin@postgresql.org Sent: Friday, July 22, 2011 8:24 AM Subject: Re: [ADMIN] revoked permissions on table still allows users to see table's structure Hi Scott Thanks for your answer. It should be a way

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Kevin Grittner
Bob Lunney bob_lun...@yahoo.com wrote: That is what schemas, permissions and search paths are for. I don't think those do as much as you're giving them credit for: test= set session authorization dee_ny; SET test= \d List of relations Schema | Name | Type | Owner

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Juan Cuervo (Quality Telecom)
In my opinion, that is precicely what privileges where created for: in order to restrict what people with database's access can do. As I see it, it would make a lot of sense to have something like a 'view_design' privilege on database objects. Imagine you own a software development company,

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Kevin Grittner
Juan Cuervo (Quality Telecom) juanrcue...@quality-telecom.net wrote: Imagine you own a software development company, Not too hard for me. Been there, done that. and decides to base the company's product on Postgresql databases. Such a company surely dont want to expose his database

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Igor Neyman
-Original Message- From: Kevin Grittner [mailto:kevin.gritt...@wicourts.gov] Sent: Friday, July 22, 2011 10:33 AM To: Juan Cuervo (Quality Telecom); Bob Lunney Cc: pgsql-admin@postgresql.org Subject: Re: revoked permissions on table still allows users to see table's structure I don't

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Dinesh Bhandary
We had the same problem, and we still do not have an elegant solution, we have a workaround which I really don't like. I agree with Juan - it is a limitation. I understand that you can solve this problem outside of a database, but it will be nice to have a strictly read only user who can just

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Scott Ribe
On Jul 22, 2011, at 12:09 PM, Dinesh Bhandary wrote: ...but it will be nice to have a strictly read only user who can just see data of the assigned objects and nothing else. Surely you mean data structure of the assigned objects and no other objects? -- Scott Ribe

[ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-21 Thread Juan Cuervo (Quality Telecom)
Hi All I'm new to the list, but have a few years as postgres user. I want to share what I consider a rare behavior of postgresql regarding database object's premissions: I have noticed that there is no way (at least no one I know) to prevent a user from seeing the table's structures in a

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-21 Thread Scott Marlowe
On Thu, Jul 21, 2011 at 6:08 PM, Juan Cuervo (Quality Telecom) juanrcue...@quality-telecom.net wrote: Hi All I'm new to the list, but have a few years as postgres user. I want to share what I consider a rare behavior of postgresql regarding database object's premissions: I have noticed that