Re: Security Problem

Daniel Rubio <drubior@tinet.org> writes:
> I'm mantaining a Postgres installation on an ISP, and I see a relativly
> important security issue.
> I can connect to postgres with a normal user login and take a look to
> the database structure of all the other databases on the installation.

That is correct; we do not consider it a security problem.  If you don't
want a user to be able to look at the system catalogs of a database, you
need to disallow him from connecting to that database at all.  (See
pg_hba.conf for this, not GRANT/REVOKE.)

            regards, tom lane