Postgres Pro
Downloads
Home   >   mailing lists

Re: TODO item: set proper permissions on non-system schemas - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: TODO item: set proper permissions on non-system schemas
Date
Msg-id 43173465.4050903@dunslane.net
Whole thread Raw
In response to Re: TODO item: set proper permissions on non-system schemas  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: TODO item: set proper permissions on non-system schemas
List pgsql-hackers
Tree view 

Tom Lane wrote:

>Change the ownership of public in template1 to be a "dbadmin" group.
>Grant membership in "dbadmin" to all the DB owners.  End of problem.
>
>
>  
>

Won't that suddenly grant the owner of foo_db  dbadmin rights in bar_db? 
That seems to violate the principle of least surprise.

cheers

andrew

pgsql-hackers by date:

Previous
From: Andrew - Supernews
Date:
Subject: Re: TODO item: set proper permissions on non-system schemas
Next
From: Patrick Welche
Date:
Subject: upgrade path / versioning roles