Re: [GENERAL] How to delete default privileges - Mailing list pgsql-general

From Jeff Janes
Subject Re: [GENERAL] How to delete default privileges
Date
Msg-id CAMkU=1wi-XF4CQ+6V==ADHLfB4rj7gVC5m4ku2Lcn-=YZ+eFew@mail.gmail.com
Whole thread Raw
In response to [GENERAL] How to delete default privileges  (Francisco Reyes <lists@natserv.net>)
List pgsql-general
On Tue, Aug 15, 2017 at 3:02 PM, Francisco Reyes <lists@natserv.net> wrote:
I have a DB where we changed ownership of all objects.

We had:

ALTER DEFAULT PRIVILEGES FOR ROLE old_dbowner GRANT SELECT ON tables    TO dbgroup_ro_group;
ALTER DEFAULT PRIVILEGES FOR ROLE old_dbowner GRANT SELECT ON sequences TO dbgroup_ro_group;

ALTER DEFAULT PRIVILEGES FOR ROLE old_dbowner GRANT SELECT, UPDATE, DELETE, INSERT ON tables    TO dbgroup_rw_group;
ALTER DEFAULT PRIVILEGES FOR ROLE old_dbowner GRANT SELECT, USAGE                  ON sequences TO dbgroup_rw_group;
ALTER DEFAULT PRIVILEGES FOR ROLE old_dbowner GRANT EXECUTE                        ON functions TO dbgroup_rw_group;


But now there is a new DB owner and I have run the above, but with new_dbowner. How can I delete the old default grants? Can't find examples and don't see it on the documentation either.


Any help would be greatly appreciated.

You just reverse them, changing GRANT...TO into REVOKE...FROM.  When the altered-default is the same thing as the default-default, then the altered-default disappears.   

Cheers,

Jeff

pgsql-general by date:

Previous
From: Francisco Reyes
Date:
Subject: [GENERAL] How to delete default privileges
Next
From: Michael Paquier
Date:
Subject: Re: [GENERAL] WAL replication wrong collate