Re: Postgresql Developer Privileges - Mailing list pgsql-general

From Jasen Betts
Subject Re: Postgresql Developer Privileges
Date
Msg-id jvifbq$qn3$1@reversiblemaps.ath.cx
Whole thread Raw
In response to Postgresql Developer Privileges  (hartrc <rhart2@mt.gov>)
List pgsql-general
On 2012-07-27, John R Pierce <pierce@hogranch.com> wrote:
> On 07/27/12 12:30 PM, hartrc wrote:

> and make each developer a member of this role.
>
>> Developers do not own the objects themselves
>
> thats a little more tricky, as AFAIK only a 'superuser' can change the
> role that owns an object, by default its owned by the rule that created
> it, but a user who's a member of a group can SET ROLE group;  and then
> any objects they create belong to that group, or they can ALTER
> TABLE/VIEW/etc name OWNER TO newowner;  for any role they are a member of.
>

after doing

  grant developer to USERNAME;

you can do

  alter user USERNAME set role to developer;

then when USERNAME logs it will be as if they had done
"set role to developer;"

--
⚂⚃ 100% natural

pgsql-general by date:

Previous
From: Jasen Betts
Date:
Subject: Re: Debian upgrade with PostgreSQL
Next
From: Thomas Kellerer
Date:
Subject: Re: Installer problem report with interesting solution