Re: Remove default privilege from DB - Mailing list pgsql-general

From Durumdara
Subject Re: Remove default privilege from DB
Date
Msg-id CAEcMXhm5sb-cw1Yek2T7dGnWJRP8-6Vr7kreQAC1Q-CY8VY=pw@mail.gmail.com
Whole thread Raw
In response to RE: Remove default privilege from DB  ("Charles Clavadetscher" <clavadetscher@swisspug.org>)
Responses RE: Remove default privilege from DB
List pgsql-general
Dear Charles!

2018-02-12 10:03 GMT+01:00 Charles Clavadetscher <clavadetscher@swisspug.org>:

Hi

 

From: Durumdara [mailto:durumdara@gmail.com]
Sent: Montag, 12. Februar 2018 09:32
To: Postgres General <pgsql-general@postgresql.org>
Subject: Remove default privilege from DB

 

Hello!

 

I need to remove default privileges from a Database.

After that some of them remains.

 

             Default access privileges

   Owner    | Schema |   Type   | Access privileges

------------+--------+----------+-------------------

 postgres   |        | function | =X/postgres

 postgres   |        | sequence |

 postgres   |        | table    |

 postgres   |        | type     | =U/postgres

 suser        |        | function | =X/suser

 suser        |        | sequence |

 suser        |        | table    |

 suser        |        | type     | =U/suser

 

How to completely remove the last items? 

Could you send me one example?

 

I assume

 

ALTER DEFAULT PRIVILEGES FOR ROLE suser REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;

ALTER DEFAULT PRIVILEGES FOR ROLE suser REVOKE USAGE ON TYPE FROM PUBLIC;

 

Bye

Charles



After that:

             Default access privileges
   Owner    | Schema |   Type   | Access privileges
------------+--------+----------+-------------------
 suser |        | function |
 suser |        | sequence |
 suser |        | table    |
 suser |        | type     |
(4 rows)

What are they?

select * from pg_default_acl

24629;0;"r";"{}"
24629;0;"S";"{}"
24629;0;"f";"{}"
24629;0;"T";"{}"

24629 = suser | namespace 0 = none in document
Hmmm... It's very strange for me. I don't find any point which links this user to this database.

Do you have any idea?

Thanks
  dd


pgsql-general by date:

Previous
From: pavan95
Date:
Subject: Re: Upgrading from Postgresql 9.1 to 10
Next
From: "Charles Clavadetscher"
Date:
Subject: RE: Remove default privilege from DB