Re: Backing out of privilege grants rabbit hole

From: Guyren Howe <guyren(at)gmail(dot)com>
To: AC Gomez <antklc(at)gmail(dot)com>
Cc: "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: Backing out of privilege grants rabbit hole
Date: 2020-04-03 03:41:02
Message-ID: 8EC7DEE2-10DB-4A3B-AC1B-CEC3D4E01414@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

More fully:

REASSIGN OWNED BY doomed_role TO successor_role;
DROP OWNED BY doomed_role;
-- repeat the above commands in each database of the cluster
DROP ROLE doomed_role;

> On Apr 2, 2020, at 20:37 , Guyren Howe <guyren(at)gmail(dot)com> wrote:
>
> https://www.postgresql.org/docs/12/sql-drop-owned.html <https://www.postgresql.org/docs/12/sql-drop-owned.html>
>
>> On Apr 2, 2020, at 20:34 , AC Gomez <antklc(at)gmail(dot)com <mailto:antklc(at)gmail(dot)com>> wrote:
>>
>> Do I understand correctly that if a role was assigned countless object privileges and you want to delete that role you have to sift through a myriad of privilege grants in what amounts to a time consuming trial and error exercise until you've got them all?
>>
>> Or is there a single command that with just delete the role and do a blanket grant removal at the same time?
>>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message AC Gomez 2020-04-03 03:42:12 Re: Backing out of privilege grants rabbit hole
Previous Message Guyren Howe 2020-04-03 03:37:00 Re: Backing out of privilege grants rabbit hole