Hide databases the user can't connect to

pg_database lists all databases including the ones the user can't connect to.
There is little point in showing them when we know connecting will fail.

diff --git a/adminer/drivers/pgsql.inc.php b/adminer/drivers/pgsql.inc.php
index 50e9dbd8cda6cf0396a275b5a68ec65777ee1d21..2cabf8f025a2fe5c50e0546ea9c8ff5e5fbb32eb 100644 (file)
--- a/adminer/drivers/pgsql.inc.php
+++ b/adminer/drivers/pgsql.inc.php
@@ -199,7 +199,7 @@ if (isset($_GET["pgsql"])) {
        }
 
        function get_databases() {
-               return get_vals("SELECT datname FROM pg_database ORDER BY datname");
+               return get_vals("SELECT datname FROM pg_database WHERE has_database_privilege(datname, 'CONNECT') ORDER BY datname");
        }
 
        function limit($query, $where, $limit, $offset = 0, $separator = " ") {