[prev in list] [next in list] [prev in thread] [next in thread] 

List:       postgresql-general
Subject:    Re: Read only user permission
From:       Dominique Devienne <ddevienne () gmail ! com>
Date:       2023-08-24 9:44:28
Message-ID: CAFCRh--kqr1nRDrXJN1V4kwSsDu_7BqweYfYJtez7nxoypTRqg () mail ! gmail ! com
[Download RAW message or body]

On Thu, Aug 24, 2023 at 11:34 AM Erik Wienhold <ewie@ewie.name> wrote:

> > On 24/08/2023 10:11 CEST Dominique Devienne <ddevienne@gmail.com> wrote:
> > On Wed, Aug 23, 2023 at 7:46 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> > > The readwrite user (not the admin) would need to issue ALTER DEFAULT
> > > PRIVILEGES granting that.
> 


> > And I don't remember reading anything like what you imply. Could you
> please
> > pinpoint in the doc where this would be explained?
> 
> This is implied by:
> 
> "You can change default privileges only for objects that will be
> created by yourself or by roles that you are a member of."
> 
> 
> https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html#SQL-ALTERDEFAULTPRIVILEGES-DESCRIPTION
> 


Thanks Erik (and Tom). I either missed that, or it didn't "sink-in"
properly.
I'll be careful to keep that in mind from now on. I appreciate the doc
pointer. --DD


[Attachment #3 (text/html)]

<div dir="ltr"><div dir="ltr">On Thu, Aug 24, 2023 at 11:34 AM Erik Wienhold &lt;<a \
href="mailto:ewie@ewie.name">ewie@ewie.name</a>&gt; wrote:<br></div><div \
class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">&gt; On 24/08/2023 \
10:11 CEST Dominique Devienne &lt;<a href="mailto:ddevienne@gmail.com" \
target="_blank">ddevienne@gmail.com</a>&gt; wrote:<br>&gt; On Wed, Aug 23, 2023 at \
7:46 PM Tom Lane &lt;<a href="mailto:tgl@sss.pgh.pa.us" \
target="_blank">tgl@sss.pgh.pa.us</a>&gt; wrote:<br>&gt; &gt; The readwrite user (not \
the admin) would need to issue ALTER DEFAULT<br> &gt; &gt; PRIVILEGES granting \
that.<br></blockquote><div>  </div><blockquote class="gmail_quote" style="margin:0px \
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">&gt; And I \
don&#39;t remember reading anything like what you imply. Could you please<br> &gt; \
pinpoint in the doc where this would be explained?<br><br> This is implied by:<br>
<br>
            &quot;You can change default privileges only for objects that will be<br>
              created by yourself or by roles that you are a member of.&quot;<br>
<br>
<a href="https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html#SQL-ALTERDEFAULTPRIVILEGES-DESCRIPTION" \
rel="noreferrer" target="_blank">https://www.postgresql.org/docs/current/sql-alterdefa \
ultprivileges.html#SQL-ALTERDEFAULTPRIVILEGES-DESCRIPTION</a></blockquote><div><br></div><div>Thanks \
Erik (and Tom). I either missed that, or it didn&#39;t &quot;sink-in&quot; \
properly.</div><div>I&#39;ll be careful to keep that in mind from now on. I \
appreciate the doc pointer. --DD</div></div></div>



[prev in list] [next in list] [prev in thread] [next in thread]