Unix Technical Forum

who can create schema?

This is a discussion on who can create schema? within the pgsql Admins forums, part of the PostgreSQL category; --> PostgreSQL 7.3.2 I'm trying to investigate why users can create new schema within a database, without being explicitly being ...


Go Back   Unix Technical Forum > Database Server Software > PostgreSQL > pgsql Admins

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-10-2008, 01:52 AM
Richard Hayward
 
Posts: n/a
Default who can create schema?

PostgreSQL 7.3.2

I'm trying to investigate why users can create new schema within a
database, without being explicitly being granted create permission on
that database.

I cant find a command that lists what privileges users have been
granted within a database. Can they create new schema or not?

And then, within a given schema, how could I list who can create new
objects?

Could anyone tell me?

regards
Richard

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 04-10-2008, 01:52 AM
Richard Hayward
 
Posts: n/a
Default Re: who can create schema?

On Sat, 28 May 2005 11:13:48 +0100, Richard Hayward
<richard@tortoise.demon.co.uk> wrote:

>PostgreSQL 7.3.2


>And then, within a given schema, how could I list who can create new
>objects?


ok, I've found the answer to this bit: Upgrading to 8.0.3 gives the
psql \dn+ command.

However \l+ does not return the equivalent permission information on
databases.

Richard
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 04-10-2008, 01:52 AM
Tom Lane
 
Posts: n/a
Default Re: who can create schema?

Richard Hayward <richard@tortoise.demon.co.uk> writes:
> I'm trying to investigate why users can create new schema within a
> database, without being explicitly being granted create permission on
> that database.


By default, they can't. Perhaps you granted create permission on the
database to PUBLIC? Also, are you sure the users in question are
not superusers?

> I cant find a command that lists what privileges users have been
> granted within a database. Can they create new schema or not?


There doesn't seem to be a psql backslash command that shows permissions
on databases; you'd need to look directly at pg_database, eg

select datname, datacl from pg_database;

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 12:06 AM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com