Re: TODO item: set proper permissions on non-system schemas

Поиск
Список
Период
Сортировка
От Andrew - Supernews
Тема Re: TODO item: set proper permissions on non-system schemas
Дата
Msg-id slrndhe7t0.1vfu.andrew+nonews@trinity.supernews.net
обсуждение исходный текст
Ответ на TODO item: set proper permissions on non-system schemas  (Jaime Casanova <systemguards@gmail.com>)
Ответы Re: TODO item: set proper permissions on non-system schemas  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On 2005-09-01, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Andrew - Supernews <andrew+nonews@supernews.com> writes:
>> On 2005-09-01, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>>> There is some merit in the thought that the DB owner should be able to
>>> grant and revoke access on the public schema, but that no longer
>>> requires ownership, only membership in an appropriate role.
>
>> How would that work without superuser intervention, given that the
>> ownership of public would be the same in all databases regardless of
>> who created them?
>
> Change the ownership of public in template1 to be a "dbadmin" group.
> Grant membership in "dbadmin" to all the DB owners.  End of problem.

Only if all db owners are equivalent.

-- 
Andrew, Supernews
http://www.supernews.com - individual and corporate NNTP services


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: 8.1beta, Subtle bug in COPY in Solaris systems
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Remove xmin and cmin from frozen tuples