I posted this in Devshed forums
(here<http://forums.devshed.com/postgresql-help-21/revoking-table-create-privileges-926853.html>)
but no one seems to be responding. Hopefully someone here can help.
How do I keep a user from being able to create tables in the public schema?
I have tried REVOKE CREATE FROM username ON SCHEMA PUBLIC but they can
still create tables.
The user has no special attributes and is not a member of another role.
mjacobson@zeus=>[local]:ises=> \dn+ public
List of schemas
Name | Owner | Access privileges | Description
--------+----------+----------------------+------------------------
public | postgres | postgres=UC/postgres+| standard public schema
| | =UC/postgres +|
| | webuser=U/postgres |
(1 row)
mjacobson@zeus=>[local]:ises=> select current_user;
current_user
--------------
mjacobson
(1 row)
mjacobson@zeus=>[local]:ises=> \du+ mjacobson
List of roles
Role name | Attributes | Member of | Description
-----------+------------+-----------+-------------
mjacobson | | {} |
mjacobson@zeus=>[local]:ises=> create table tb_foo(i int);
CREATE TABLE
mjacobson@zeus=>[local]:ises=> drop table tb_foo;
DROP TABLE
--
Moshe Jacobson
Nead Werx, Inc. | Senior Systems Engineer
2323 Cumberland Parkway, Suite 201 | Atlanta, GA 30339
[email protected] | www.neadwerx.com