From: | David Fetter <david(at)fetter(dot)org> |
---|---|
To: | Robert Haas <robertmhaas(at)gmail(dot)com> |
Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, PG Hackers <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: ALTER ... OWNER TO ... vs. ALTER DEFAULT PRIVILEGES |
Date: | 2015-10-31 14:42:45 |
Message-ID: | 20151031144245.GA16466@fetter.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Sat, Oct 31, 2015 at 12:16:31AM +0100, Robert Haas wrote:
> On Thu, Oct 29, 2015 at 10:31 PM, David Fetter <david(at)fetter(dot)org> wrote:
> > Had this been part of the original ALTER DEFAULT PRIVILEGES patch,
> > those privileges would simply have been applied. Since it wasn't, I'm
> > ass-u-me'ing that changing the default behavior to that is going to
> > cause (possibly legitimate) anxiety.
>
> The word "applied" is not very clear here. You want to revoke all
> existing privileges and then regrant whatever the default privileges
> would have been given the new owner? That might be a reasonable thing
> to have a command for, but doing it automatically on an owner change
> does not sound like a good idea. That could be very surprising
> behavior.
OK, so I think there are operationally useful use cases for
mix'n'match of the following:
- Clear all existing DEFAULT PRIVILEGES
- Preserve DEFAULT PRIVILEGES from the previous owner
- Apply DEFAULT PRIVILEGES for the new owner
Are there others? I suspect we could get some lift out of
CREATE ... OWNER ...
which would then Do The Right Thing™ with respect at least to initial
creation without having to be connected as that role.
Cheers,
David.
--
David Fetter <david(at)fetter(dot)org> http://fetter.org/
Phone: +1 415 235 3778 AIM: dfetter666 Yahoo!: dfetter
Skype: davidfetter XMPP: david(dot)fetter(at)gmail(dot)com
Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate
From | Date | Subject | |
---|---|---|---|
Next Message | Andres Freund | 2015-10-31 14:53:03 | snapshots in analyze |
Previous Message | Amit Kapila | 2015-10-31 12:37:32 | Re: Freeze avoidance of very large table. |