Re: Permissions to schema

[TiTo® <tito@xxxxxx>]

I thing he is writing about the database objects estructure too. You can avoid users to access data from a schema, but you cant avoid they to access objects structure. As example you will see, on a table, its columns but not its data.

 

Sergio Tito

----- Original Message -----

From: Scott Mead

To: Eduardo Sá dos Reis

Cc: pgsql-admin@xxxxxxxxxxxxxx

Sent: Monday, October 26, 2009 10:04 AM

Subject: Re: Permissions to schema

2009/10/26 Eduardo Sá dos Reis <eduardoreis@xxxxxxxxxxxxx>

Hi,

 

I have the structure on Postgre:

 

database:  dbGlobal

 

schema1:         sch_sist1     owner sch_sist1:  john

 

schema2          sch_sist2     owner sch_sist2:  mary

 

 

I' m using pgAdmin III.

 

Is there a way to avoid the mary to access the schema sch_sist1 ?

 

I don't want that mary see/access the schema of john and I don't want that john see/access the schema of mary.

 

Anybody has a solution.

http://www.postgresql.org/docs/current/static/sql-revoke.html

kgb=# create schema s1;
CREATE SCHEMA
kgb=# create user mary;
CREATE ROLE
kgb=# revoke all on schema s1 from mary;
REVOKE
kgb=# create table s1.testing (id int);
CREATE TABLE
kgb=# \c kgb mary
kgb=> set search_path=s1;
SET
kgb=> \dt
No relations found.
kgb=> select * from s1.testing;
ERROR:  permission denied for schema s1
kgb=>

--Scott