Thread: User privileges

It is possible that a user is a member of more than one group.
Do this user's privileges AND or OR the privileges of each of the two
groups?

Thank you all.

"Mihai Gheorghiu" <tanethq@earthlink.net> writes:
> It is possible that a user is a member of more than one group.
> Do this user's privileges AND or OR the privileges of each of the two
> groups?

OR.  A user's privileges are always the union of what he has personally
and what he has via any group.  See aclcheck() in
src/backend/catalog/aclchk.c: it keeps looking for any way to grant
permission.

            regards, tom lane