Re: Both side privileges

From: Toomas Kristin <toomas(dot)kristin(at)gmail(dot)com>
To: Jean-Philippe Chenel <jp(dot)chenel(at)live(dot)ca>
Cc: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: Both side privileges
Date: 2020-07-14 13:59:20
Message-ID: 84AD5C5D-0DBF-429B-BEAC-D8DC01F33395@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


And please be sure that default permissions are defined properly. Otherwise it may happen that userA creates a new table but userB has access for that. Alternative option is that user has to grant proper access for the role group after every time when a new db object is created.

Toomas

> On 14. Jul 2020, at 16:36, Jean-Philippe Chenel <jp(dot)chenel(at)live(dot)ca> wrote:
>
> Thank for your answer David.
> This is what I'll do.
> De : David G. Johnston <david(dot)g(dot)johnston(at)gmail(dot)com <mailto:david(dot)g(dot)johnston(at)gmail(dot)com>>
> Envoyé : 13 juillet 2020 19:46
> À : Jean-Philippe Chenel <jp(dot)chenel(at)live(dot)ca <mailto:jp(dot)chenel(at)live(dot)ca>>
> Cc : pgsql-general(at)lists(dot)postgresql(dot)org <mailto:pgsql-general(at)lists(dot)postgresql(dot)org> <pgsql-general(at)lists(dot)postgresql(dot)org <mailto:pgsql-general(at)lists(dot)postgresql(dot)org>>
> Objet : Re: Both side privileges
>
> On Mon, Jul 13, 2020 at 4:42 PM Jean-Philippe Chenel <jp(dot)chenel(at)live(dot)ca <mailto:jp(dot)chenel(at)live(dot)ca>> wrote:
> Hi,
>
> I try to give userA privileges on userB objects and same thing to the userB, giving privileges on userA objects.
>
> Grant userB to userA; —ok
> Grant userA to userB; —error: role userB is already member of role userA
>
> Create a "group role" that retains ownership and then add both users to that group.
>
> David J.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Marc Millas 2020-07-14 15:14:55 some random() clarification needed
Previous Message Jean-Philippe Chenel 2020-07-14 13:36:34 Re: Both side privileges