Re: Making a schema "read-only" (was Unexpected message in grant/revoke script)

On Fri, Mar 14, 2008 at 12:55 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> "Webb Sprague" <webb.sprague@gmail.com> writes:
>  > Also, I revoked what I thought was everything possible on the public
>  > schema, but a user is still able to create a table in that schema --
>  > could someone explain:
>
>  > oregon=# revoke create on schema public from foobar cascade;
>  > REVOKE
>
>  You've got a conceptual error here:

Not surprising...

<SNIP>

>  Start with
>         revoke all on schema public from public
>  and then grant only what you want.

I will give it a go, and thanks!

>
>                         regards, tom lane
>