Revoking table & function creation privileges

[Moshe Jacobson <moshe@xxxxxxxxxxxx>]

I posted this in Devshed forums (here) but no one seems to be responding. Hopefully someone here can help.

How do I keep a user from being able to create tables in the public schema?

I have tried REVOKE CREATE FROM username ON SCHEMA PUBLIC but they can still create tables.

The user has no special attributes and is not a member of another role.

mjacobson@zeus=>[local]:ises=> \dn+ public

                          List of schemas

  Name  |  Owner   |  Access privileges   |      Description

--------+----------+----------------------+------------------------

 public | postgres | postgres=UC/postgres+| standard public schema

        |          | =UC/postgres        +|

        |          | webuser=U/postgres   |

(1 row)

mjacobson@zeus=>[local]:ises=> select current_user;

 current_user

--------------

 mjacobson

(1 row)

mjacobson@zeus=>[local]:ises=> \du+ mjacobson

                  List of roles

 Role name | Attributes | Member of | Description

-----------+------------+-----------+-------------

 mjacobson |            | {}        |

mjacobson@zeus=>[local]:ises=> create table tb_foo(i int);

CREATE TABLE

mjacobson@zeus=>[local]:ises=> drop table tb_foo;

DROP TABLE

--

Moshe Jacobson
Nead Werx, Inc. | Senior Systems Engineer

2323 Cumberland Parkway, Suite 201 | Atlanta, GA 30339
moshe@xxxxxxxxxxxx | www.neadwerx.com