Postgres list databases permission

Question

I am trying to create a database with a role, that can connect to and view that database only.

How I went about it:

_, err = db.Exec("CREATE DATABASE " + database.Name + " ENCODING 'utf8' LC_COLLATE 'en_US.UTF-8'")
_, err = db.Exec("CREATE ROLE " + database.User + " WITH LOGIN PASSWORD '" + database.Password + "'")
_, err = db.Exec("REVOKE ALL PRIVILEGES ON DATABASE " + database.Name + " FROM PUBLIC")
_, err = db.Exec("GRANT ALL PRIVILEGES ON DATABASE " + database.Name + " TO " + database.User)

The problem is that my role can connect to postgres via:

psql -U haruki -W -h localhost

Which is okay, but it can list all databases with its corresponding permissions, even though it cannot connect to them.

Is there any way I can prevent the user from listing all databases? Or perhaps allow logging in only with the -d flag?

Community · Accepted Answer · 2017-05-23 12:19:23Z

1

There's no way restricting this in pgsql. The pg_catalog holds the names of the databases.

Either you have to add a custom layer to do this in between in any language you use or you can follow this by editing the postgresql config and using DDL statements.

edited May 23, 2017 at 12:19

CommunityBot

11 silver badge

answered Sep 18, 2016 at 18:26

Marlon Abeykoon

12.6k4 gold badges60 silver badges78 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Postgres list databases permission

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related