On Saturday 31 January 2009 19:30:36 Andrew Dunstan wrote:
> > ------------------------------------------------------------------------
> >
> > Allow GRANT/REVOKE permissions to be applied to all schema objects
> > with one command
> > The proposed syntax is: GRANT SELECT ON ALL TABLES IN public TO
> > phpuser; GRANT SELECT ON NEW TABLES IN public TO phpuser;
> >
> >
> >
> > ------------------------------------------------------------------------
>
> But the syntax you posted does not do this at all. Where does it
> restrict the grant to a single schema, like the syntax above?
Since any kind of implementation is going to have to scan and filter pg_class
(and possibly pg_namespace), I would consider going one step further and
allowing some kind of wildcard mechanism. This could later be extended to
lots of other useful places, such as, drop all tables like 'test%'.