Re: default privileges wording - Mailing list pgsql-hackers

From Tom Lane
Subject Re: default privileges wording
Date
Msg-id 6638.1309559273@sss.pgh.pa.us
Whole thread Raw
In response to Re: default privileges wording  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
Robert Haas <robertmhaas@gmail.com> writes:
> On Wed, Jun 29, 2011 at 8:53 PM, David Fetter <david@fetter.org> wrote:
>> How about this?
>> 
>> PostgreSQL grants some types of objects some default privileges to
>> PUBLIC. �Tables, columns, schemas and tablespaces grant no privileges
>> to PUBLIC by default. �For other types, the default privileges granted
>> to PUBLIC are as follows: CONNECT and CREATE TEMP TABLE for databases;
>> EXECUTE privilege for functions; and USAGE privilege for languages.
>> The object owner can, of course, REVOKE both default and expressly
>> granted privileges.

> That looks pretty good to me.  I'd probably say "grants default
> privileges on some types of objects" rather than "grants some types of
> objects default privileges", but YMMV.

Yeah --- this is using "grant" in mutually incompatible ways.  We grant
privileges on objects to users, and pointing the verb in the other
direction will just confuse people more.  The first sentence in
particular is a mess.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: SECURITY LABEL on shared database object
Next
From: David Fetter
Date:
Subject: Update releases