Postgresql – remove create table permission in postgresql 8.3

I think the solution revolves around this simple question, is the one table that the Windows system needs access to part of an existing system that other applications need access to? Or is it a separate table that is only used by the Windows app?

If it's the latter a new schema with just that one table would indeed seem to be the answer.

If it's the former, permissions are the key. Create a new user that the Windows app will connect as, and then only grant access to that one table to that user. See: http://www.postgresql.org/docs/8.4/static/privileges.html

You have to have another role, that has privileges to write directly to tables. Then you create the function using this another role, and add to function definition "SECURITY DEFINER" clause. And then you grant execute on this function to your web role.

You can read more about it in documentation.

You might also want to check blog post that I once wrote about securing database.