Re: BUG #1497: Default permissions allow any user to create objects

Barry Brown wrote:
> >> The docs say that initially only the owner of a database may use the
> >> objects
> >> created in it. But I have found that ANY user can work with any
> >> object by
> >> default, even in the template1 database.
> >
> > Uh, where did you see that in the docs?
>
> First paragraph of section 17.4 (Privileges):
>
> "When a database object is created, it is assigned an owner. .... By
> default, only an owner (or a superuser) can do anything with the
> object. In order to allow other users to use it, privileges must be
> granted."
>
> To me, that paragraphs says that only the owner of a database can do
> anything with it and all other privileges must be explicitly granted to
> others.

Yea, that is confusing. When they say "database object", the don't mean
database, but object created in the database, like a table or view.

I modified the text to not mention "database":

When an object is created, it is assigned an owner. The

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073