From: | James Sewell <james(dot)sewell(at)lisasoft(dot)com> |
---|---|
To: | pgsql-general(at)postgresql(dot)org |
Subject: | ROLE based DEFAULT PRIVILEGES |
Date: | 2013-05-30 02:37:13 |
Message-ID: | CANkGpBv0-yH+sfXs7uPZCAxOSMEHdoGSG1nM6uS2tSbw9gs7dA@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hello,
I have a database in which I want to grant permission so that when ANY
table is created by a member of role_a SELECT access is granted on it to
ALL members of role_b.
I had thought that:
ALTER DEFAULT PRIVILEGES FOR ROLE role_a GRANT SELECT ON TABLES TO role_b;
or
ALTER DEFAULT PRIVILEGES GRANT SELECT ON TABLES TO role_b;
Would achieve this, but it seems that the first creates default permission
records ONLY for tables created by role_a (not members of role_a) and the
second creates default permission records for tables created by the
Postgres user (or whoever you are connected to psql as).
Reading the documentation again, this is actually what is stated.
Is there a way to achieve this? I want role_a to maintain this level of
access as new tables are created (all creators will be in role_b).
James Sewell
Solutions Architect
_____________________________________
[image:
http://www.lisasoft.com/sites/lisasoft/files/u1/2013hieghtslogan_0.png]
Level 2, 50 Queen St,
Melbourne, VIC, 3000
P: 03 8370 8000 F: 03 8370 8099 W: www.lisasoft.com
--
------------------------------
The contents of this email are confidential and may be subject to legal or
professional privilege and copyright. No representation is made that this
email is free of viruses or other defects. If you have received this
communication in error, you may not copy or distribute any part of it or
otherwise disclose its contents to anyone. Please advise the sender of your
incorrect receipt of this correspondence.
From | Date | Subject | |
---|---|---|---|
Next Message | Stephen Frost | 2013-05-30 02:45:17 | Re: ROLE based DEFAULT PRIVILEGES |
Previous Message | Chris Travers | 2013-05-30 01:17:06 | feedback request (Perl/Pg developers) |