Re: type privileges and default privileges - Mailing list pgsql-hackers

From Tom Lane
Subject Re: type privileges and default privileges
Date
Msg-id 17434.1320962939@sss.pgh.pa.us
Whole thread Raw
In response to Re: type privileges and default privileges  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: type privileges and default privileges
List pgsql-hackers
Robert Haas <robertmhaas@gmail.com> writes:
> On Thu, Nov 10, 2011 at 3:17 PM, Peter Eisentraut <peter_e@gmx.net> wrote:
>> No, I'm pondering having pg_default_acl initialized so that newly
>> created types have explicit USAGE privileges in their typacl column, so
>> acldefault() wouldn't be needed.  (And builtin types would have their
>> typacl initialized analogously.)  I suppose this is how we might have
>> done it if we had invented ALTER DEFAULT PRIVILEGES first.

> I'm not convinced.  That's a lot of catalog clutter for no benefit.

To actually get rid of acldefault, we'd have to do that not only for
types but for all objects with ACLs.  That's a LOT of catalog bulk,
and like Robert I'm not seeing much benefit.  It's not unreasonable
to want the typical case to be small and fast.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: LOCK_DEBUG is busted
Next
From: Tom Lane
Date:
Subject: Re: Disable OpenSSL compression