Re: Able to do ALTER DEFAULT PRIVILEGES from a user who is not the owner - Mailing list pgsql-hackers

From Andrew Gierth
Subject Re: Able to do ALTER DEFAULT PRIVILEGES from a user who is not the owner
Date
Msg-id 87pns973jo.fsf@news-spur.riddles.org.uk
Whole thread Raw
In response to Re: Able to do ALTER DEFAULT PRIVILEGES from a user who is not theowner  (rajan <vgmonnet@gmail.com>)
Responses Re: Able to do ALTER DEFAULT PRIVILEGES from a user who is not theowner  (rajan <vgmonnet@gmail.com>)
List pgsql-hackers
>>>>> "rajan" == rajan  <vgmonnet@gmail.com> writes:

 rajan> Andrew,

 rajan> Another question, If the user student is not the owner of the
 rajan> Schema(additional) and has only USAGE / no privileges, How come
 rajan> it is able to modify permissions at schema level?

Because it's not modifying anything that affects any other user. If
"student" can't create objects in schema "additional", then the default
has no effect (since it applies only to objects created by "student");
if those permissions are later granted, then the previously set default
still applies.

-- 
Andrew (irc:RhodiumToad)


pgsql-hackers by date:

Previous
From: Andrew Gierth
Date:
Subject: Re: Synchronize with imath upstream
Next
From: David Rowley
Date:
Subject: Re: pg_dump multi VALUES INSERT