RE: Granting of permissions on tables - Mailing list pgsql-sql

From Saltsgaver, Scott
Subject RE: Granting of permissions on tables
Date
Msg-id 7283DE19D141D111AD0E00A0C95B195503A59E74@mail2.aiinet.com
Whole thread Raw
In response to Granting of permissions on tables  ("Saltsgaver, Scott" <scottsa@aiinet.com>)
Responses Re: Granting of permissions on tables
List pgsql-sql
After I ran into this condition, the first thing I tried was to grant
permissions back to myself.  PostgreSQL shot me down with a permission
denied error.  So I had to log is as the superuser and then grant
permissions to myself.

Thanks for everyone's help.  So would an exceptable workaround be to grant
permissions to yourself first and then to all other users?

Scott

-----Original Message-----
From: Tom Lane [mailto:tgl@sss.pgh.pa.us]
Sent: Thursday, October 05, 2000 5:38 PM
To: Saltsgaver, Scott
Cc: 'pgsql-sql@postgresql.org'
Subject: Re: [SQL] Granting of permissions on tables 


"Saltsgaver, Scott" <scottsa@aiinet.com> writes:
> Is this a bug or desired behavior?  I would imagine since I owned the
tables
> and then granted permissions to another user, I wouldn't lose my
> permissions.

It's a bug, or at least a misfeature.  As long as you haven't done any
explicit grants or revokes, 7.0 uses an implicit access control list
that grants all privileges to the owner and none to anyone else.
However, the moment you do any explicit grant/revoke, that implicit
ACL entry for the owner isn't used anymore.  You have to explicitly
grant rights to yourself again :-(.

You don't need superuser help to do this, you just have to doGRANT ALL ON table TO yourself
as the table owner.  But it's stupid to have to do that when it's
supposed to be the default condition.  Fixed for 7.1.
        regards, tom lane


pgsql-sql by date:

Previous
From: Tom Lane
Date:
Subject: Re: [HACKERS] Counting bool flags in a complex query
Next
From: Tom Lane
Date:
Subject: Re: Granting of permissions on tables