Andrew Dunstan <andrew(at)dunslane(dot)net> writes:
> Tom Lane wrote:
>> Change the ownership of public in template1 to be a "dbadmin" group.
>> Grant membership in "dbadmin" to all the DB owners. End of problem.
> Won't that suddenly grant the owner of foo_db dbadmin rights in bar_db?
> That seems to violate the principle of least surprise.
I'm assuming here that the various dbowners aren't even allowed to
connect to each others' databases.
regards, tom lane