User are not constrained to their own DB

[StephanErb]

If I create a DB and an associated user, I also get the permission to view and potentially edit other database instances.

[sebastianneubauer]

Any ideas what permissions are not sufficiently restricted?

[StephanErb]

Sorry, looks like I spoke to soon. I can see other databases and their schemas but not their content.

Might be we need something like this https://dba.stackexchange.com/questions/17790/created-user-can-access-all-databases-in-postgresql-without-any-grants

[sebastianneubauer]

Currently it is the same information every user can access using the collection resource of the API anyhow, so we can close this issue, right?

[StephanErb]

I would not agree. The database user is completely distinct from the user using the Postgraas service to provision the DB.