Irrevocable privileges - Mailing list pgsql-admin

From Dave Held
Subject Irrevocable privileges
Date
Msg-id 49E94D0CFCD4DB43AFBA928DDD20C8F902618506@asg002.asg.local
Whole thread Raw
Responses Re: Irrevocable privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-admin

I think it's silly that any privileges that an owner grants to himself are
essentially irrevocable.  It's silly because it makes changing the object
owner pointless.  Consider:

User joe creates table foo
User joe grants permission rw to himself on foo
User joe decides that user bob should really be the owner of foo
User joe revokes his permissions, alters foo to be owned by bob,
    and gives bob rw privilege
User joe is annoyed to find out that his privileges are in a state of limbo

The only way to fix this is to do a backup/restore.  It seems to me
that owner privs should be revokable in a transaction where the owner
is changed to a different user.  That way, joe doesn't leave behind a
trail of mess when he decides to change ownership of objects.

__
David B. Held
Software Engineer/Array Services Group
200 14th Ave. East,  Sartell, MN 56377
320.534.3637 320.253.7800 800.752.8129

pgsql-admin by date:

Previous
From: "Joel Fradkin"
Date:
Subject: Many idle processes?
Next
From: Tom Lane
Date:
Subject: Re: Irrevocable privileges