Re: Default Privilege Table ANY ROLE

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Nicolas Paris <nicolas(dot)paris(at)riseup(dot)net>, pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Default Privilege Table ANY ROLE
Date: 2018-11-16 20:17:59
Message-ID: 6373.1542399479@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Stephen Frost <sfrost(at)snowman(dot)net> writes:
> There was much discussion of being able to have 'FOR ALL ROLES' or
> similar for ALTER DEFAULT PRIVILEGES when it went in, but there was a
> lot of concern about one user getting to define the default privileges
> for objects created by some other user.

Yeah, it's hard to see how you could allow such a command to anybody
but a superuser.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Gerhard Wiesinger 2018-11-18 07:49:06 PostgreSQL MVCC and alternative REDO implementation - my thoughts
Previous Message Stephen Frost 2018-11-16 19:55:37 Re: Default Privilege Table ANY ROLE