Re: TODO item: set proper permissions on non-system schemas

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: TODO item: set proper permissions on non-system schemas
Дата
Msg-id 12841.1125586863@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: TODO item: set proper permissions on non-system schemas  (Andrew - Supernews <andrew+nonews@supernews.com>)
Ответы Re: TODO item: set proper permissions on non-system schemas  (Andrew Dunstan <andrew@dunslane.net>)
Список pgsql-hackers
Andrew - Supernews <andrew+nonews@supernews.com> writes:
> On 2005-09-01, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> There is some merit in the thought that the DB owner should be able to
>> grant and revoke access on the public schema, but that no longer
>> requires ownership, only membership in an appropriate role.

> How would that work without superuser intervention, given that the
> ownership of public would be the same in all databases regardless of
> who created them?

Change the ownership of public in template1 to be a "dbadmin" group.
Grant membership in "dbadmin" to all the DB owners.  End of problem.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: David Fetter
Дата:
Сообщение: Re: broken configure, broken makefile?
Следующее
От: "William ZHANG"
Дата:
Сообщение: Re: Call for 7.5 feature completion