grant everything on everything and then revoke - Mailing list pgsql-general

From Ivan Sergio Borgonovo
Subject grant everything on everything and then revoke
Date
Msg-id 20090303103531.5af91cee@dawn.webthatworks.it
Whole thread Raw
Responses Re: grant everything on everything and then revoke
Re: grant everything on everything and then revoke
List pgsql-general
I'd like to have different users mainly to have a different search
schema path.
Things may evolve so this is not going to be the only reason to have
more than one user.

But I'm faced with the problem of granting the same access of the
owner of the db to the other users.

But I read:

http://www.postgresql.org/docs/8.3/static/sql-grant.html
The SQL standard does not support setting the privileges on more
than one object per command.

This is going to make maintenance and development a PITA every time I
add a new table, sequence, schema...

Defining a role/group with all grant access and then assigning that
group to all users is going to make this a bit less painful, but
still every time I'm going to add something to the DB I'll have to
remember to modify the group privileges.

Even when things will evolve, all users should be able to do
everything to most object with a few exception so it is easier to
revoke than to grant.

Any advice even with completely different approach?

thanks

--
Ivan Sergio Borgonovo
http://www.webthatworks.it


pgsql-general by date:

Previous
From: "Harald Armin Massa[legacy]"
Date:
Subject: Re: postgreSQL & amazon ec2 cloud
Next
From: Tim Uckun
Date:
Subject: Re: PostgreSQL clustering with DRBD