Martijn van Oosterhout <kleptog@svana.org> writes:
> I don't beleive you have to explicitly grant access to the database, or
> the schema, but you definitly have to grant access to the tables
> directly.
They're completely separate privileges. GRANT ON DATABASE grants or
revokes permissions associated with database-level operations, not
permissions on specific objects contained in the database. Likewise
for GRANT ON SCHEMA.
What the OP seems to be wishing for is a wild-card grant operation,
viz
GRANT ALL ON TABLE *.* TO joeblow
which would indeed be a useful thing to have, but it's *not* GRANT ON
DATABASE.
regards, tom lane
