REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

Started by PostgreSQL Bugs Listalmost 25 years ago2 messagesbugs
Jump to latest
#1PostgreSQL Bugs List
pgsql-bugs@postgresql.org

Jean-Francois Leveque (leveque@webmails.com) reports a bug with a severity of 2
The lower the number the more severe it is.

Short Description
REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

Long Description
System: SuSE 7.0
PostgreSQL RPM: postgres-7.0.2-29
select version(); :
PostgreSQL 7.0.2 on i686-pc-linux-gnu, compiled by gcc 2.95.2

When I revoke select from a user, it revokes select from other
users, database object owner included.

Sample Code
test:~ > createdb bugcheck
CREATE DATABASE
test:~ > psql bugcheck
Welcome to psql, the PostgreSQL interactive terminal.

Type: \copyright for distribution terms
\h for help with SQL commands
\? for help on internal slash commands
\g or terminate with semicolon to execute query
\q to quit

bugcheck=> CREATE TABLE bugtable (
bugcheck(> bugcolumn int);
CREATE
bugcheck=> select * from bugtable;
bugcolumn
-----------
(0 rows)

bugcheck=> REVOKE SELECT ON bugtable FROM nobody;
CHANGE
bugcheck=> select * from bugtable;
ERROR: bugtable: Permission denied.

No file was uploaded with this report

#2Tom Lane
tgl@sss.pgh.pa.us
In reply to: PostgreSQL Bugs List (#1)
Re: REVOKE ... FROM username equals REVOKE ... FROM PUBLIC

pgsql-bugs@postgresql.org writes:

When I revoke select from a user, it revokes select from other
users, database object owner included.

No, only from the owner. Update to 7.1.

regards, tom lane