Re: Able to do ALTER DEFAULT PRIVILEGES from a user who is not the owner

From: Andrew Gierth <andrew(at)tao11(dot)riddles(dot)org(dot)uk>
To: rajan <vgmonnet(at)gmail(dot)com>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Able to do ALTER DEFAULT PRIVILEGES from a user who is not the owner
Date: 2019-02-03 07:09:53
Message-ID: 87pns973jo.fsf@news-spur.riddles.org.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

>>>>> "rajan" == rajan <vgmonnet(at)gmail(dot)com> writes:

rajan> Andrew,

rajan> Another question, If the user student is not the owner of the
rajan> Schema(additional) and has only USAGE / no privileges, How come
rajan> it is able to modify permissions at schema level?

Because it's not modifying anything that affects any other user. If
"student" can't create objects in schema "additional", then the default
has no effect (since it applies only to objects created by "student");
if those permissions are later granted, then the previously set default
still applies.

--
Andrew (irc:RhodiumToad)

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message David Rowley 2019-02-03 07:12:09 Re: pg_dump multi VALUES INSERT
Previous Message Andrew Gierth 2019-02-03 07:07:36 Re: Synchronize with imath upstream