4 ms·
This may be a small nit, especially since this is specifically a public test facility. But you might want to restrict the guest roles to only access their own d
by olefoo 14y ago
This may be a small nit, especially since this is specifically a public test facility. But you might want to restrict the guest roles to only access their own database public schema.
I can't see other's query activity, but I can see some of the pg_catalog tables.
For instance
select count(*) from pg_stat_database;
count
-------
1900
(1 row)
- zaidos 14y agoBy default, Heroku allows roles on their shared database plans to view limited info about databases on the same machine. Stuff like name, type and owner are visible. Here is a sample response when attempting to do anything with a database other than your own: FATAL: permission denied for database "xxxxxxxxxxxx" DETAIL: User does not have CONNECT privilege. Previous connection kept
- deleted 14y ago[deleted]