2

Given the following...

iproductiondb  | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =Tc/postgres                 +
               |          |          |             |             | postgres=CTc/postgres        +
               |          |          |             |             | iproduction=CTc/postgres

Are the postgres and iproduction roles the only roles that have any type of access to iproductiondb ?

=Tc/postgres is making me wonder if I need to fix something?

Improve this question

1 Answer 1

Reset to default
4

=Tc/postgres means that postgres has granted CONNECT and TEMPORARY privileges to PUBLIC. You can revoke these privilege with :

revoke connect on database iproductiondb from public;
revoke temporary on database iproductiondb from public;

In general you should also check pg_hba.conf.

Improve this answer
2
  • Would that mean other users could select / update ?
    – Corey
    Apr 6, 2020 at 18:40
  • TEMPORARY means creating temporary tables. AFAIK this does not give SELECT OR UPDATE privilges on database objects. But you should also check privileges at schema level with \dn+ and privileges on tables with \dp+.
    – pifor
    Apr 6, 2020 at 18:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.