Mercurial > gemma

changeset 313:10b93a8ee057

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Lock out the PUBLIC more rigorously
author Tom Gottfried <tom@intevation.de>
date Wed, 01 Aug 2018 18:16:14 +0200
parents 0745b4d336c4
children adceb47920fb
files schema/auth.sql
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/schema/auth.sql	Wed Aug 01 17:35:12 2018 +0200
+++ b/schema/auth.sql	Wed Aug 01 18:16:14 2018 +0200
@@ -5,12 +5,12 @@
 --
 
 -- We do not want any users to be able to create any objects
-REVOKE CREATE ON SCHEMA public FROM PUBLIC;
+REVOKE ALL ON SCHEMA public FROM PUBLIC;
 
 --
 -- Privileges for waterway_user
 --
-GRANT USAGE ON SCHEMA users, waterway TO waterway_user;
+GRANT USAGE ON SCHEMA public, users, waterway TO waterway_user;
 GRANT SELECT ON ALL TABLES IN SCHEMA public, users, waterway TO waterway_user;
 
 --