On 10/19/06, Krycek <krycek6(at)wp(dot)pl> wrote:
> The proposed syntax is:
>
> GRANT SELECT ON ALL TABLES IN public TO phpuser; GRANT SELECT ON NEW
> TABLES IN public TO phpuser;"
> "GRANT SELECT ON NEW TABLES IN public TO phpuser;"?
>
> What does "NEW TABLES" mean in this context?
the point is to allow tables to inherit permissions from the parent
schema. this is actually imo much more important than multiple table
grant, because it is already trivially easy to do that with a pl/pgsql
function doing 'grant' in dynamic sql over information schema for
example. There was considerable debate on this topic at the time that
todo was written up.
the 'new tables' bit also raises the difficulty up a notch.
merlin