Re: User has role, role has UPDATE, user can't update, cannot figure this out.

That's it exactly. That's incredible, so basic, and I never knew you needed
SELECT to make qualified UPDATES.

Thanks Stpehen.

On Fri, Mar 5, 2021 at 2:08 PM Stephen Frost <sfrost(at)snowman(dot)net> wrote:

> Greetings,
>
> * Wells Oliver (wells(dot)oliver(at)gmail(dot)com) wrote:
> > It seems very straight forward, but I have a user belongs to the role
> > analyst, and the role analyst has the permission to UPDATE, e.g..
> >
> > GRANT REFERENCES, UPDATE ON TABLE myschema.mytable TO analyst;
> >
> > But the user gets a permission denied error on the table for a simple
> > UPDATE query. I can't figure it out: no trigger functions. A few FKs, but
> > nothing complex. Is there a way to figure out why this user is being
> denied
> > permission?
>
> Is there a WHERE clause for the UPDATE? If so, then the role also needs
> SELECT rights.
>
> Thanks,
>
> Stephen
>

--
Wells Oliver
wells(dot)oliver(at)gmail(dot)com <wellsoliver(at)gmail(dot)com>