ROLES and ALTER DEFAULT PRIVILEGES

From: David Fetter <david(at)fetter(dot)org>
To: PG Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: ROLES and ALTER DEFAULT PRIVILEGES
Date: 2015-11-19 23:22:36
Message-ID: 20151119232236.GC9182@fetter.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Folks,

The docs for ALTER DEFAULT PRIVILEGES state:

You can change default privileges only for objects that will be
created by yourself or by roles that you are a member of.

but I have not been able to reproduce the "or by roles that you are a
member of" part. The attached script should create a table tab_one()
which role baz can read. No such grant occurs.

As I understand the docs, anything created by bar have the same
default privileges as foo, and of any other roles of which bar is a
member.

I think that this is a bug, and that the fix should be back-patched.

What say?

Cheers,
David.
--
David Fetter <david(at)fetter(dot)org> http://fetter.org/
Phone: +1 415 235 3778 AIM: dfetter666 Yahoo!: dfetter
Skype: davidfetter XMPP: david(dot)fetter(at)gmail(dot)com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate

Attachment Content-Type Size
adp_test text/plain 206 bytes

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Geoghegan 2015-11-20 00:54:31 Re: Using quicksort for every external sort run
Previous Message Tom Lane 2015-11-19 22:58:17 Re: Bug in numeric multiplication