Re: User postgres unable to revoke privileges? - Mailing list pgsql-general

From Tom Lane
Subject Re: User postgres unable to revoke privileges?
Date
Msg-id 28879.1370806523@sss.pgh.pa.us
Whole thread Raw
In response to Re: User postgres unable to revoke privileges?  (François Beausoleil <francois@teksol.info>)
List pgsql-general
=?iso-8859-1?Q?Fran=E7ois_Beausoleil?= <francois@teksol.info> writes:
> Le 2013-06-06 � 17:59, Tom Lane a �crit :
>> Note where the fine manual says:
>>
>> schema_name
>> The name of an existing schema. Each target_role must have CREATE privileges for each specified schema.
>>
>> There was some debate previously about whether that restriction was a
>> good idea at all; and given this example, it seems like we definitely
>> shouldn't require it during a REVOKE.

> I may not have read that section carefully enough. I'll try again, by adding postgres back with create privileges on
thepublic schema. 

FYI, after some further discussion on pgsql-hackers we've decided to
drop this permission check altogether.  Future PG releases won't behave
this way, so there won't be any ordering dependency between doing ALTER
DEFAULT PRIVILEGES and doing GRANT/REVOKE CREATE ON SCHEMA.

            regards, tom lane


pgsql-general by date:

Previous
From: David Johnston
Date:
Subject: Re: Postgresql - Currval Vs Session Pool
Next
From: Markus Renner
Date:
Subject: multilib environment with postgresql92 from CentOS-repos? (9.2.4)