Re: Resetting priveleges on a table

Tom Lane wrote:
> You need to revoke them as that user, likely.  REVOKE really means
> "revoke grants I made", not "revoke any grant anybody made".

Ok I tried logging is as that user.  Oddly after the revoke then only
grant that disappeared was one I created.

Maybe it has something to do with 'grant option' permissions which seem
to have been created here.

Transscript: (pconner is the obsolet user, bryan is my account)

ec=# \z bulkuploadcfg
                             Access privileges for database "ec"
  Schema |     Table     |                        Access privileges
--------+---------------+------------------------------------------------------------------
  public | bulkuploadcfg |
{pconner=a*r*w*d*R*x*t*/pconner,=arwdRxt/pconner,=arwdRxt/bryan}
(1 row)

ec=# select current_user;
  current_user
--------------
  pconner
(1 row)

ec=# revoke all on bulkuploadcfg from public;
REVOKE
ec=# \z bulkuploadcfg
                     Access privileges for database "ec"
  Schema |     Table     |                 Access privileges
--------+---------------+---------------------------------------------------
  public | bulkuploadcfg | {pconner=a*r*w*d*R*x*t*/pconner,=arwdRxt/pconner}
(1 row)

ec=# revoke all on bulkuploadcfg from pconner;
REVOKE
ec=# \z bulkuploadcfg
                     Access privileges for database "ec"
  Schema |     Table     |                 Access privileges
--------+---------------+---------------------------------------------------
  public | bulkuploadcfg | {pconner=a*r*w*d*R*x*t*/pconner,=arwdRxt/pconner}
(1 row)

ec=# revoke grant option for all on bulkuploadcfg from pconner;
REVOKE
ec=# \z bulkuploadcfg
                     Access privileges for database "ec"
  Schema |     Table     |                 Access privileges
--------+---------------+---------------------------------------------------
  public | bulkuploadcfg | {pconner=a*r*w*d*R*x*t*/pconner,=arwdRxt/pconner}
(1 row)

--
Bryan