>
> The command
> copy pg_user to stdout;
>
> will also show the cleartext password and I think it is hard to do a rewrite
> here,
> since this would also affect the pg_dump ?
OK, I have committed code that removes the REVOKE from initdb, and does
not allow them to do any adding or altering of users if there is a
password involved AND the ACL for pg_user is null. It prints a nice
message telling them they need to issue the REVOKE command so normal
users can't read the passwords.
If they use user passwords psql \d does fail if you do this. Do we want
to duplicate the query without the pg_user reference if the \d query
fails?
--
Bruce Momjian
maillist@candle.pha.pa.us