From: | Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at> |
---|---|
To: | Bruce Momjian <bruce(at)momjian(dot)us> |
Cc: | Michael Banck <mbanck(at)gmx(dot)net>, David Burns <david(dot)burns(at)fedex(dot)com>, pgsql-hackers(at)lists(dot)postgresql(dot)org |
Subject: | Re: Version 14/15 documentation Section "Alter Default Privileges" |
Date: | 2023-11-08 12:12:24 |
Message-ID: | d3dcd30164a4f86588d33013e3bd41d7f576f17f.camel@cybertec.at |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-docs pgsql-hackers |
On Tue, 2023-11-07 at 17:30 -0500, Bruce Momjian wrote:
> You didn't seem to like my SET ROLE suggestion so I removed it.
I thought that the information that you can use SET ROLE to assume
the identity of another role is correct, but leads a bit too far
in the manual page of ALTER DEFAULT PRIVILEGES.
> > + <para>
> > + There is no way to change the default privileges for objects created by
> > + arbitrary roles. You have run <command>ALTER DEFAULT PRIVILEGES</command>
>
> I find the above sentence odd. What is its purpose?
I cannot count how many times I have seen the complaint "I have run ALTER DEFAULT
PRIVILEGES, and now when some other user creates a table, the permissions are
unchanged". People tend to think that if you omit FOR ROLE, the change applies to
PUBLIC.
Your improved documentation of "target_role" already covers that somewhat, so if
you don't like the repetition, I'm alright with that. I just thought it might
be worth stating it explicitly.
I think your patch is fine and ready to go.
Yours,
Laurenz Albe
>
From | Date | Subject | |
---|---|---|---|
Next Message | PG Doc comments form | 2023-11-08 12:26:12 | CREATE SUBSCRIPTION issue |
Previous Message | Laurenz Albe | 2023-11-08 11:58:58 | Re: Another user complaint regarding visibility of pg_catalog data |
From | Date | Subject | |
---|---|---|---|
Next Message | Daniel Gustafsson | 2023-11-08 12:15:00 | Re: pgsql: Clean up role created in new subscription test. |
Previous Message | Dean Rasheed | 2023-11-08 12:02:22 | Re: Infinite Interval |