Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Scott Ribe
On Jul 22, 2011, at 12:09 PM, Dinesh Bhandary wrote: > ...but it will be nice to have a strictly read only user who can just see > data of the assigned objects and nothing else. Surely you mean data & structure of the assigned objects and no other objects? -- Scott Ribe scott_r...@elevated-dev

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Dinesh Bhandary
We had the same problem, and we still do not have an elegant solution, we have a workaround which I really don't like. I agree with Juan - it is a limitation. I understand that you can solve this problem outside of a database, but it will be nice to have a strictly read only user who can just

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Igor Neyman
-Original Message- From: Kevin Grittner [mailto:kevin.gritt...@wicourts.gov] Sent: Friday, July 22, 2011 10:33 AM To: Juan Cuervo (Quality Telecom); Bob Lunney Cc: pgsql-admin@postgresql.org Subject: Re: revoked permissions on table still allows users to see table's structure I don't t

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Kevin Grittner
"Juan Cuervo (Quality Telecom)" wrote: > Imagine you own a software development company, Not too hard for me. Been there, done that. > and decides to base the company's product on Postgresql databases. > Such a company surely dont want to expose his database design to > its customers, but i

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Juan Cuervo (Quality Telecom)
In my opinion, that is precicely what privileges where created for: in order to restrict what people with database's access can do. As I see it, it would make a lot of sense to have something like a 'view_design' privilege on database objects. Imagine you own a software development company, an

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Kevin Grittner
Bob Lunney wrote: > That is what schemas, permissions and search paths are for. I don't think those do as much as you're giving them credit for: test=> set session authorization dee_ny; SET test=> \d List of relations Schema | Name | Type | Owner -+--+---+

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Bob Lunney
ervo (Quality Telecom) To: Scott Marlowe Cc: pgsql-admin@postgresql.org Sent: Friday, July 22, 2011 8:24 AM Subject: Re: [ADMIN] revoked permissions on table still allows users to see table's structure Hi Scott Thanks for your answer. It should be a way to prevent this from normal u

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-22 Thread Juan Cuervo (Quality Telecom)
Hi Scott Thanks for your answer. It should be a way to prevent this from normal users who only need access to a set of tables, a view or even a store procedure. (Maybe a VIEW_SCHEMA privilege of roles?). View a table's structure should only be allowed to users who has at least one privilege o

Re: [ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-21 Thread Scott Marlowe
On Thu, Jul 21, 2011 at 6:08 PM, Juan Cuervo (Quality Telecom) wrote: > Hi All > > I'm new to the list, but have a few years as postgres user. I want to share > what I consider a rare behavior of postgresql regarding database object's > premissions: > > I have noticed that there is no way (at leas

[ADMIN] revoked permissions on table still allows users to see table's structure

2011-07-21 Thread Juan Cuervo (Quality Telecom)
Hi All I'm new to the list, but have a few years as postgres user. I want to share what I consider a rare behavior of postgresql regarding database object's premissions: I have noticed that there is no way (at least no one I know) to prevent a user from seeing the table's structures in a dat