Re: dangling permission on tables after drop user.

On Thu, Sep 30, 2004 at 09:32:30AM -0400, Vivek Khera wrote:
> 
> On Sep 29, 2004, at 5:35 PM, Alvaro Herrera wrote:
> 
> >>>Am I missing something Vivek, or should the gross hack be "creating a
> >>>user with id=102" ?
> >>
> >>And how exactly does one accomplish this?  pg_users is a view so you
> >>can't insert into it.
> >
> >CREATE USER ... WITH SYSID 102;
> 
> Ok. I did that.  So now how do I get rid of that user and all the 
> grants?  DROP USER ends up with the dangling GRANTs still hanging 
> about.
> 
> Is there no way to drop a user and have the necessary grants disappear? 
>  How does one drop a user cleanly?

I'm afraid you'll have to ALTER TABLE (or whatever) for each of these ... 
I don't think there is a command that would help you do that
automatically.  You can cheat by looking at system catalogs for the
acl column (e.g. pg_class.relacl) and using that in a function.

-- 
Alvaro Herrera ()
"El sentido de las cosas no viene de las cosas, sino de
las inteligencias que las aplican a sus problemas diarios
en busca del progreso." (Ernesto Hernández-Novich)