Re: Default Privilege Table ANY ROLE

Поиск
Список
Период
Сортировка
От Nicolas Paris
Тема Re: Default Privilege Table ANY ROLE
Дата
Msg-id 20181114202055.a23bgy354qnmo7jn@riseup.net
обсуждение исходный текст
Ответ на Re: Default Privilege Table ANY ROLE  (Laurenz Albe <laurenz.albe@cybertec.at>)
Ответы Re: Default Privilege Table ANY ROLE  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-general
On Wed, Nov 14, 2018 at 09:04:44PM +0100, Laurenz Albe wrote:
> Nicolas Paris wrote:
> > I d'like my user be able to select on any new table from other users.
> > 
> > > ALTER DEFAULT PRIVILEGES  FOR  ROLE "theowner1"  IN SCHEMA "myschema" GRANT  select ON TABLES TO "myuser"
> > > ALTER DEFAULT PRIVILEGES  FOR  ROLE "theowner2"  IN SCHEMA "myschema" GRANT  select ON TABLES TO "myuser"
> > > ...
> > 
> > 
> > Do I really have to repeat the command for all users ?
> > 
> > The problem is I have many user able to create tables and all of them
> > have to read each other. 
> 
> Now whenever "alice" has to create a table, she runs
> SET ROLE tableowner;
> Then all these tables belong to "tableowner", and each user in group "tablereader"
> can SELECT from them:

Yes, this step is overhead to me:
> SET ROLE tableowner;

In my mind, both bob/alice inherit from the same group, so they should
share the table they build according to this:

> ALTER DEFAULT PRIVILEGES FOR ROLE tableowner IN SCHEMA myschema GRANT SELECT ON TABLES TO tablereader;




-- 
nicolas


В списке pgsql-general по дате отправления:

Предыдущее
От: Laurenz Albe
Дата:
Сообщение: Re: Default Privilege Table ANY ROLE
Следующее
От: Tom Lane
Дата:
Сообщение: Re: pg_dump out of memory for large table with LOB