Bug 369721

Summary:	PostgreSQL Server grants the create permission to public on the schema public
Product:	Gentoo Linux	Reporter:	David van Laatum <david>
Component:	[OLD] Server	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description David van Laatum 2011-06-02 01:31:20 UTC

Using 9.0.3 it appears that by default the public group (ie everyone) in postgreSQL has create permission on the public schema of all databases. I assume the permission is set incorrectly on the template1 table. This also appears to be happening in debian lenny installs at my work.

Reproducible: Always

Comment 1 Aaron W. Swenson gentoo-dev

2011-06-03 11:37:48 UTC

http://www.postgresql.org/docs/current/static/ddl-schemas.html#DDL-SCHEMAS-PRIV

We follow upstream here.