Re: TODO item: set proper permissions on non-system schemas

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: andrew(at)supernews(dot)com, pgsql-hackers(at)postgresql(dot)org
Subject: Re: TODO item: set proper permissions on non-system schemas
Date: 2005-09-01 17:03:33
Message-ID: 43173465.4050903@dunslane.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane wrote:

>Change the ownership of public in template1 to be a "dbadmin" group.
>Grant membership in "dbadmin" to all the DB owners. End of problem.
>
>
>
>

Won't that suddenly grant the owner of foo_db dbadmin rights in bar_db?
That seems to violate the principle of least surprise.

cheers

andrew

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2005-09-01 17:08:14 Re: Remove xmin and cmin from frozen tuples
Previous Message Steve Atkins 2005-09-01 16:59:55 Re: Call for 7.5 feature completion