Peter Eisentraut <peter_e@gmx.net> writes:
>>> This area is under SQL standard control, so we can't really invent our
>>> own behavior.
>> What *would* do the right thing here, or would anything?
> I think we don't need GRANT to be recursive, but instead the permission
> checks at runtime should allow
> SELECT * FROM persons;
> to succeed even if there are no permissions on "employees".
Hmm, if we are supposing that the spec should control this, then
surely we can find chapter and verse spelling out what should happen.
regards, tom lane