Merge pull request getredash#55 from KiiCorp/hide-unnecessary-tables-…

…43-2 Restrict shown tables with schema.
KiiCorp · Feb 28, 2019 · 674bf09 · 674bf09
2 parents 3c9bbdc + db2d623
commit 674bf09
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/redash/query_runner/pg.py b/redash/query_runner/pg.py
@@ -111,7 +111,13 @@ def _get_tables(self, schema):
         query = """
         SELECT table_schema, table_name, column_name
         FROM information_schema.columns
-        WHERE table_schema NOT IN ('pg_catalog', 'information_schema');
+        WHERE table_schema IN (
+            SELECT table_schema
+            FROM information_schema.table_privileges
+            WHERE grantee = (SELECT current_user)
+            AND table_schema NOT IN ('pg_catalog', 'information_schema')
+            GROUP BY table_schema
+        );
         """
 
         self._get_definitions(schema, query)