Re: [PATCH] ALTER DEFAULT PRIVILEGES with GRANT/REVOKE ON SCHEMAS

On Tue, Nov 22, 2016 at 08:59:09AM -0200, Matheus de Oliveira wrote:
> Hi all,
> 
> I noticed that we have no option to set default privileges for newly
> created schemas, other than calling GRANT explicitly. At work I use ALTER
> DEFAULT PRIVILEGE (ADP) command extensively, as the developers are
> permitted to manage DDL on the databases, and all work fine except for when
> a new schema is created. So,I'd like to propose this very simple patch
> (attached) that adds the capability of using SCHEMAS, adding the following
> syntax to ADP:
> 
>     ALTER DEFAULT PRIVILEGES
>         [ FOR { ROLE | USER } target_role [, ...] ]
>         abbreviated_grant_or_revoke
> 
>     where abbreviated_grant_or_revoke is one of:
> 
>     GRANT { USAGE | CREATE | ALL [ PRIVILEGES ] }
>         ON SCHEMAS
>         TO { [ GROUP ] role_name | PUBLIC } [, ...] [ WITH GRANT OPTION ]
> 
>     REVOKE [ GRANT OPTION FOR ]
>         { USAGE | CREATE | ALL [ PRIVILEGES ] }
>         ON SCHEMAS
>         FROM { [ GROUP ] role_name | PUBLIC } [, ...]
>         [ CASCADE | RESTRICT ]

I'd love to have this available.

Best,
David.
-- 
David Fetter  http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david(dot)fetter(at)gmail(dot)com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate