>
> Bruce Momjian wrote:
> >All tables are created with default permissions for SELECT to PUBLIC, so
> >views are no different.
>
> Is this not contrary to the SQL standard? I understood that SQL tables
> are created with permissions for their creator only; any permissions for
> other users must be granted explicitly. According to "SQL The Standard
> Handbook" (Cannan & Otten, 1993), the owner of the schema in which a table
> is created is given a full set of privileges, and no other user can access
Will be the default in 6.3, I think.
> the table or even discover that it exists!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Not in 6.3, or maybe ever. Too much OO stuff for that, I think.
>
> It certainly seems undesirable to give automatic access to data of unknown
> sensitivity. Surely the default permission should be for the table's
> creator alone or for the owner of the PostgreSQL database (which I suppose
> is equivalent to the `schema').
>
> I see that Jan Wieck has posted a method for preventing world readability;
> perhaps this should just be flagged as a configurable option.
--
Bruce Momjian | 830 Blythe Avenue
maillist@candle.pha.pa.us | Drexel Hill, Pennsylvania 19026
+ If your life is a hard drive, | (610) 353-9879(w)
+ Christ can be your backup. | (610) 853-3000(h)