Re: USAGE on schema allowed by default?

Christoph Dalitz <christoph.dalitz@hs-niederrhein.de> writes:
>> I agree that this isn't completely ideal, but I stand by my comment that
>> it's not worth breaking every client that looks at system catalogs in
>> order to prevent it.
>>
> What about [ hiding the real catalogs behind views ]

A good solution would need more than that.  For example, something I've
heard repeatedly is that people would like to hide the source code of
their SQL or PLxxx functions from users who are nonetheless allowed to
call those functions.  A row-wise selective view of pg_proc can't fix
that.  In many cases it's less than clear which rows of which catalogs
to hide anyway.

Ultimately, if you don't want other people to see any of your catalog
information, you shouldn't let 'em into your database.  There's still
the option of setting up distinct databases.

            regards, tom lane