Re: Revoke for a new role

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Revoke for a new role
Дата
Msg-id 11208.1213369902@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Revoke for a new role  ("Milen A. Radev" <milen@radev.net>)
Ответы Re: Revoke for a new role  ("Rafael Domiciano" <rafael.domiciano@gmail.com>)
Список pgsql-admin
"Milen A. Radev" <milen@radev.net> writes:
> Rafael Domiciano написа:
>> I need to create a role (Postgres user) that cannot drop or create table,
>> but can create TEMP tables. This role must do I, U and D normally.

> For a role to be able to create tables (and other objects) it should
> have "CREATE" privilege on the _schema_ in question.

More specifically, what you're going to need to do is revoke "public"
create access on the public schema, and then selectively grant it to
everyone you want to have it.  There's no notion of "everyone but X
gets this privilege".

            regards, tom lane

В списке pgsql-admin по дате отправления:

Предыдущее
От: "Milen A. Radev"
Дата:
Сообщение: Re: Revoke for a new role
Следующее
От: "Rafael Domiciano"
Дата:
Сообщение: Re: Revoke for a new role