Chandra Barnett wrote:
> What I've done so far is to set up a "group role" and explicitly
> granted it every possible type of permission on the database in
> question, and also on the individual relations in that database. Then
> I created a "login role" and made it part of the group role I created.
> I expected that to let me connect to the dbms using that login role
> and database, and that I'd then be able to select/insert/update/delete
> in the relations in that database. I can connect just fine to that
> database with that login role, as I expected, but I then can't execute
> any commands.
Probably your group role needs to have the INHERIT property set.
Alternatively, you could "SET ROLE group" after connecting.
> It seems there must be some other step that I didn't know to do. In
> MySQL, for example, after changing permissions, one needs to "flush
> privileges" to get everything to take effect. Is there something
> analogous to this in PostgreSQL?
Fortunately not.
--
Alvaro Herrera http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support