PostgreSQL Bugs - BUG #2077: Hiding databases which I am not owner

Author

BUG #2077: Hiding databases which I am not owner

Martin Pelikan

2005-11-30, 1:24 pm

The following bug has been logged online:

Bug reference: 2077
Logged by: Martin Pelikan
Email address: martin.pelikan@gmail.com
PostgreSQL version: 8.0.4
Operating system: Gentoo Linux 2.6.14-gentoo-r2
Description: Hiding databases which I am not owner
Details:

We have had on our old server (Debian Sarge) previous version of postgresql
database server (7.4.7) and if I logged in as normal user, I saw only my
database. Now we had to upgrade to gentoo ('cos debian is down) and I
decided to install new pgsql - 8.0.4 and if I log in (psql or phppgadmin), I
see all databases, not only my one.

I think it's a bug because of security - nosey people are everywhere...
And I want not to other people see how many users and databases are here -
server is half-public :)
Thank you for your reply - I found nowhere answer to my question

---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?

http://archives.postgresql.org

Euler Taveira de Oliveira

2005-11-30, 8:25 pm

--- Martin Pelikan <martin.pelikan@gmail.com> escreveu:

> I think it's a bug because of security - nosey people are
> everywhere...
No. It's a feature.

> And I want not to other people see how many users and databases are
> here -
> server is half-public :)
>
See is one thing, access is another thing. We never hid databases and
other catalog objects. Instead we allow and deny access to this
databases. See pg_hba.conf documentation for information.

Euler Taveira de Oliveira
euler[at]yahoo_com_br

____________________
____________________
_______________
Yahoo! doce lar. Faça do Yahoo! sua homepage.
http://br.yahoo.com/homepageset.html

---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?

http://archives.postgresql.org

Sponsored Links