as Loos
*Sent:* dinsdag 30 januari 2007 9:41
*To:* pgsql-general@postgresql.org
*Subject:* [GENERAL] Unauthorized users can see db schema and read
functions
Hi,
I've noticed that any user who can logon to a db cluster can read the
schema of all databases in it, including the code of all plpgsql f
Willy-Bas Loos wrote:
Hi,
I've noticed that any user who can logon to a db cluster can read the
schema
of all databases in it, including the code of all plpgsql functions.
Even in
schema's he/she doesn't have access to.
[snip]
o Why is schema information not restricted?
o Is there any way
_
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Willy-Bas Loos
Sent: dinsdag 30 januari 2007 9:41
To: pgsql-general@postgresql.org
Subject: [GENERAL] Unauthorized users can see db schema and read
functions
Hi,
I've noticed that any user who can logon to
Hi,
I've noticed that any user who can logon to a db cluster can read the schema
of all databases in it, including the code of all plpgsql functions. Even in
schema's he/she doesn't have access to. For tables it just says 'access
denied for schema bla', after which the structure is still shown to
