From b8bea7fc569b1a09948603f1d7f22cb168dd4d07 Mon Sep 17 00:00:00 2001 From: Felix Geyer Date: Sun, 7 Jun 2015 21:52:43 +0200 Subject: [PATCH] Hide databases the user can't connect to pg_database lists all databases including the ones the user can't connect to. There is little point in showing them when we know connecting will fail. --- adminer/drivers/pgsql.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/adminer/drivers/pgsql.inc.php b/adminer/drivers/pgsql.inc.php index 50e9dbd8..2cabf8f0 100644 --- a/adminer/drivers/pgsql.inc.php +++ b/adminer/drivers/pgsql.inc.php @@ -199,7 +199,7 @@ if (isset($_GET["pgsql"])) { } function get_databases() { - return get_vals("SELECT datname FROM pg_database ORDER BY datname"); + return get_vals("SELECT datname FROM pg_database WHERE has_database_privilege(datname, 'CONNECT') ORDER BY datname"); } function limit($query, $where, $limit, $offset = 0, $separator = " ") {