Обсуждение: 7.3 and user permissions

I'm having a strange issue.  I just created a new user with createdb
and createuser permissions.  The user only has permissions to view the
data in one database.  However, when I login to any db as him, I am
able to select data from tables that he has no select permisisons on.
The user is not in any groups.

Does anyone know what is going on, or something I'm over looking.  The
tables are in the public schema and a few others.

Also, I would really prefer that this user only have access to his one
db and not able to see anything in the other db's.  Is this possible?

Thanks,

Chris
PG 7.3.4 (I know, we're working on a plan to go to 8)

Chris Hoover <revoohc@gmail.com> writes:
> I'm having a strange issue.  I just created a new user with createdb
> and createuser permissions.  The user only has permissions to view the
> data in one database.  However, when I login to any db as him, I am
> able to select data from tables that he has no select permisisons on.

"createuser" actually means "superuser" ... does that make it clearer?

PG 8.1 will have a privilege level that allows creation of users without
full superuserdom, but no existing release does.

> Also, I would really prefer that this user only have access to his one
> db and not able to see anything in the other db's.  Is this possible?

Database connection privileges are controlled by pg_hba.conf; you could
adjust that file to allow this user access to only his own database.
Better take away his superuser rights first though, else he could undo
the change if he chose to.

            regards, tom lane