On 12/10/2015 12:56 PM, oleg yusim wrote:
2) Way to ensure that only superuser can run meta commands, such as \du, \dp, \z
Those metacommands only exist in the psql command line tool, so to only restrict access to them, you'd need to modify that tool. however, that wouldn't stop users from directly querying pg_catalog.
Regular users HAVE to be able to read the pg_catalog metadata, as they are used by many wrapper libraries such as ORM's to get table definitions and such. The SQL standard information_schema is implemented as views of pg_catalog.
-- john r pierce, recycling bits in santa cruz -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
