Re: Default Privilege Table ANY ROLE

From: Nicolas Paris <nicolas(dot)paris(at)riseup(dot)net>
To: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Default Privilege Table ANY ROLE
Date: 2018-11-14 19:11:00
Message-ID: 20181114190815.72lprnsyh4w7c67c@riseup.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Wed, Nov 14, 2018 at 10:05:51AM -0600, Ron wrote:
> On 11/14/2018 08:19 AM, Nicolas Paris wrote:
> > Hi
> >
> > I d'like my user be able to select on any new table from other users.
> >
> Would ROLE Groups solve your problem?

Maybe yes, not sure what it is. I tested this:

> create role myrolegroup;
> ALTER DEFAULT PRIVILEGES FOR ROLE "myrolegroup" IN SCHEMA "myschema" GRANT select ON TABLES TO "myuser";
> create myuser1 inherit in role myrolegroup;
> create myuser2 inherit in role myrolegroup;

But if myuser2 creates a table, then myuser1 cannot select on it. I
guess that's because inheritance only apply for GRANT (which is
distinct from DEFAUL PRIVILEGE).

Thanks,

--
nicolas

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Konstantin Knizhnik 2018-11-14 19:57:25 libpq to JDBC adapter
Previous Message Rémi Cura 2018-11-14 18:47:38 Re: TOAST : partial detoasting : only a small part of a toasted value (for pgpointcloud)