ROLE based DEFAULT PRIVILEGES

From: James Sewell <james(dot)sewell(at)lisasoft(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: ROLE based DEFAULT PRIVILEGES
Date: 2013-05-30 02:37:13
Message-ID: CANkGpBv0-yH+sfXs7uPZCAxOSMEHdoGSG1nM6uS2tSbw9gs7dA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hello,

I have a database in which I want to grant permission so that when ANY
table is created by a member of role_a SELECT access is granted on it to
ALL members of role_b.

I had thought that:

ALTER DEFAULT PRIVILEGES FOR ROLE role_a GRANT SELECT ON TABLES TO role_b;

or

ALTER DEFAULT PRIVILEGES GRANT SELECT ON TABLES TO role_b;

Would achieve this, but it seems that the first creates default permission
records ONLY for tables created by role_a (not members of role_a) and the
second creates default permission records for tables created by the
Postgres user (or whoever you are connected to psql as).

Reading the documentation again, this is actually what is stated.

Is there a way to achieve this? I want role_a to maintain this level of
access as new tables are created (all creators will be in role_b).

James Sewell
Solutions Architect
_____________________________________

[image:
http://www.lisasoft.com/sites/lisasoft/files/u1/2013hieghtslogan_0.png]

Level 2, 50 Queen St,
Melbourne, VIC, 3000

P: 03 8370 8000 F: 03 8370 8099 W: www.lisasoft.com

--

------------------------------
The contents of this email are confidential and may be subject to legal or
professional privilege and copyright. No representation is made that this
email is free of viruses or other defects. If you have received this
communication in error, you may not copy or distribute any part of it or
otherwise disclose its contents to anyone. Please advise the sender of your
incorrect receipt of this correspondence.

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Stephen Frost 2013-05-30 02:45:17 Re: ROLE based DEFAULT PRIVILEGES
Previous Message Chris Travers 2013-05-30 01:17:06 feedback request (Perl/Pg developers)