Re: GRANT ALL PRIVILEGES ON DATABASE

From: Oliver Elphick <olly(at)lfix(dot)co(dot)uk>
To: Andrew Gold <agold(at)cbamedia(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: GRANT ALL PRIVILEGES ON DATABASE
Date: 2005-08-17 16:01:27
Message-ID: 1124294487.12095.133.camel@linda
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Wed, 2005-08-17 at 08:35 -0700, Andrew Gold wrote:
> Actually, I read the GRANT man page several times; what you state so
> clearly and simply, isn't described so plainly in that document.
>
> I posted because I found the GRANT man page deficient.
>
> Strictly speaking the GRANT man page indicated the following:
>
> -----------------begin quote---------------------------
> ALL PRIVILEGES
>
> Grant all of the privileges applicable to the object at once. The
> PRIVILEGES key word is optional in PostgreSQL, though it is required by
> strict SQL.
>
> -------------------end quote---------------------------
>
> This followed a series of descriptions of various privileges (select,
> insert, update, etc.). From the context of the description, it appears
> that "GRANT ALL PRIVILEGES" bestows all of the preceding rights on the
> recipient user.
>
> It is not at all intuitive that "GRANT ALL PRIVILEGES" gives a user the
> right to create schemas and temporary tables, and that alone.

You missed the bit where it describes what privileges apply to various
kinds of object.

> Whether you meant it or not, your initial comment came across as
> patronizing.

Sorry about that.
--
Oliver Elphick olly(at)lfix(dot)co(dot)uk
Isle of Wight http://www.lfix.co.uk/oliver
GPG: 1024D/A54310EA 92C8 39E7 280E 3631 3F0E 1EC0 5664 7A2F A543 10EA
========================================
Do you want to know God? http://www.lfix.co.uk/knowing_god.html

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Oliver Elphick 2005-08-17 16:08:23 Re: GRANT ALL PRIVILEGES ON DATABASE
Previous Message Alvaro Herrera 2005-08-17 15:57:53 Re: GRANT ALL PRIVILEGES ON DATABASE