Prevent users to drop triggers applied on table

dipti shah wrote:

Hi,

We have been using a stored procedure which allow users to create
table. The stored procedure creates actual table, logging tables,
views, and applies triggers. I want to prevent table owner from
deleting the triggers applied on table by create table stored
procedure. Could anyone please suggest me to get way out here.

if you don't want someone to modify tables, including dropping triggers,
then they shouldn't be the owner of it. the owner has full rights to a
table, including the right to delete it, alter it, etc.

Yah...that's correct but I am wondering if someone out there knows work
around to this.

I could make my table owner to postgres user but then is there any way
original user can drop the table. I want original users should allow to drop
their table.

Thanks,
Dipti

On Thu, Apr 1, 2010 at 12:58 PM, John R Pierce <pierce@hogranch.com> wrote:

On 1 Apr 2010, at 9:52, dipti shah wrote:

Yah...that's correct but I am wondering if someone out there knows work around to this.

I could make my table owner to postgres user but then is there any way original user can drop the table. I want original users should allow to drop their table.

If you want to give the user DROP TABLE rights, he will also need to be able to drop the triggers and such on that table.

If you want to work around that you'll need to take the same approach with which you created those tables.

Having the tables owned by a more powerful user will help with that, but in your situation I think the postgres superuser may be a bit too powerful. You're probably better off creating a non-superuser role for this purpose.

Alban Hertroys

--
Screwing up is an excellent way to attach something to the ceiling.

!DSPAM:737,4bb4688c10419781048118!