postgresql/no-grant-to-public

Why this matters

The PUBLIC pseudo-role covers every current and future role in the database. Privilege grants should name roles explicitly. `REVOKE ... FROM PUBLIC` is unaffected — revoking implicit grants is good hygiene.

Examples

GRANT SELECT ON users TO PUBLIC;

GRANT SELECT ON users TO reporting;

REVOKE ALL ON users FROM PUBLIC;

Configure it

// eslint.config.js
import postgresql from "eslint-plugin-postgresql";

export default [
  {
    files: ["**/*.sql"],
    languageOptions: {
      parser: postgresql.configs.recommended.languageOptions.parser,
    },
    plugins: { postgresql },
    rules: {
      "postgresql/no-grant-to-public": "warn",
    },
  },
];

Options

This rule has no options.