Re: TODO item: set proper permissions on non-system schemas

Andrew - Supernews <andrew+nonews@supernews.com> writes:
> On 2005-09-01, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> There is some merit in the thought that the DB owner should be able to
>> grant and revoke access on the public schema, but that no longer
>> requires ownership, only membership in an appropriate role.

> How would that work without superuser intervention, given that the
> ownership of public would be the same in all databases regardless of
> who created them?

Change the ownership of public in template1 to be a "dbadmin" group.
Grant membership in "dbadmin" to all the DB owners.  End of problem.
        regards, tom lane