Philip Warner <pjw@rhyme.com.au> writes:
> Do you mean that by putting the ACLs at the end I may be allowing access
> (via the rule parser) that is inappropriate?
I'm more worried about failing to allow access that's necessary to do
the restore. What about
\connect - user1
create table t1;
\connect - user2
create rule .... (refers to t1)
I think the create rule will fail if you haven't yet granted user2
access rights for t1.
regards, tom lane