Re: [HACKERS] Table permissions problem - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: [HACKERS] Table permissions problem
Date
Msg-id 199808130500.BAA28598@candle.pha.pa.us
Whole thread Raw
In response to Re: [HACKERS] Table permissions problem  (darcy@druid.net (D'Arcy J.M. Cain))
Responses Re: [HACKERS] Table permissions problem  (jwieck@debis.com (Jan Wieck))
Re: [HACKERS] Table permissions problem  (darcy@druid.net (D'Arcy J.M. Cain))
List pgsql-hackers
> Thus spake Bruce Momjian
> > > I have since found out that it was changed so that no one, not even the
> > > owner, had full privs on the tables.  I went in and changed my code
> > > to grant ALL on each database to the db owner.  Everything is fine
> > > except that I still can't create a view.  I still  get that "pg_rewrite:
> > > Permission denied." error.  Any ideas?
> > >
> >
> > Only superuser.  From TODO:
> >
> >     CREATE VIEW requires super-user priviledge
> >
> > This is because someone who can modify pg_rewrite can create their own
> > view to modify any table.
>
> Hmm.  That makes it difficult.  I would like to build databases from
> scripts.  I guess I can build them as the super user.
>
> Shouldn't the database owner have more privs then someone using the
> database?  Is that what that TODO item is actually suggesting?

Remember some tables are shared with all databases.  Makes things more
difficult.



--
Bruce Momjian                          |  830 Blythe Avenue
maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
  +  If your life is a hard drive,     |  (610) 353-9879(w)
  +  Christ can be your backup.        |  (610) 853-3000(h)

pgsql-hackers by date:

Previous
From: darcy@druid.net (D'Arcy J.M. Cain)
Date:
Subject: Re: [HACKERS] Table permissions problem
Next
From: "Dr. Michael Meskes"
Date:
Subject: Re: [HACKERS] Latest ecpg patch?