Weird Grant/Revoke/Usage behavior

Can someone comment on this?

---------------------------------------------------------------------------

Joshua D. Drake wrote:

Hello,

The below seems incorrect. If I am in the schema the behavior seems
correct. I can't see or select from the table.
However if I am not in the schema I am able to see the table and its
structure. The user jd is not a superuser.

cleancontact=# revoke usage on schema financials from jd;
REVOKE
cleancontact=# \c cleancontact jd
You are now connected to database "cleancontact" as user "jd".
cleancontact=> \d financials.foo
Table "financials.foo"
Column | Type | Modifiers
--------+--------+---------------------------------------------------------
id | bigint | not null default nextval('financials.foo_id_seq'::text)
fname | text |
Indexes:
"foo_pkey" PRIMARY KEY, btree (id)

cleancontact=> set search_path='financials';
SET
cleancontact=> \d
No relations found.
cleancontact=> \d foo
Did not find any relation named "foo".
cleancontact=>

---------------------------(end of broadcast)---------------------------
TIP 6: explain analyze is your friend

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

Bruce Momjian <pgman@candle.pha.pa.us> writes:

Can someone comment on this?

It's operating as designed. Schemas you don't have USAGE privilege on
are ignored if listed in your search path.

regards, tom lane