What is the best thing to do with PUBLIC schema in Postgresql database
От | Hu, Patricia |
---|---|
Тема | What is the best thing to do with PUBLIC schema in Postgresql database |
Дата | |
Msg-id | A22137031445794A99E795CDDB6BAF588C56A3A5@KWAWNEXMBP002.corp.root.nasd.com обсуждение исходный текст |
Ответы |
Re: What is the best thing to do with PUBLIC schema in
Postgresql database
Re: What is the best thing to do with PUBLIC schema in Postgresql database Re: What is the best thing to do with PUBLIC schema in Postgresql database |
Список | pgsql-general |
Since it could potentially be a security loop hole. So far the action taken to address it falls into these two categories: drop the PUBLIC schema altogether. One of the concerns is with some of the system objects that have been exposed throughPUBLIC schema previously, now they will need other explicit grants to be accessible to users. e.g pg_stat_statements. keep the PUBLIC schema but revoke all privileges to it from public role, then grant as necessity comes up. Any feedback and lessons from those who have implemented this? Confidentiality Notice:: This email, including attachments, may include non-public, proprietary, confidential or legallyprivileged information. If you are not an intended recipient or an authorized agent of an intended recipient, youare hereby notified that any dissemination, distribution or copying of the information contained in or transmitted withthis e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the senderby replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any partof the contents to any other person. Thank you.
В списке pgsql-general по дате отправления: