Tom, do you have plans yet on how to store permissions granted on schemas?
For the almost-done permissions on functions and languages, I reuse the
aclitem arrays. Since these objects only have one kind of permission, it
seems reasonable to overload the select/read permission bit for this.
However, I imagine that schemas may have a different set of permissions,
perhaps including CREATE and such, which might not fit into the aclitem.
In case you're inventing a whole new mechanism that needs to be
coordinated, let me know.
--
Peter Eisentraut peter_e@gmx.net