ROLES and ALTER DEFAULT PRIVILEGES

Started by David Fetterabout 10 years ago1 messages
#1David Fetter
david@fetter.org
1 attachment(s)

Folks,

The docs for ALTER DEFAULT PRIVILEGES state:

You can change default privileges only for objects that will be
created by yourself or by roles that you are a member of.

but I have not been able to reproduce the "or by roles that you are a
member of" part. The attached script should create a table tab_one()
which role baz can read. No such grant occurs.

As I understand the docs, anything created by bar have the same
default privileges as foo, and of any other roles of which bar is a
member.

I think that this is a bug, and that the fix should be back-patched.

What say?

Cheers,
David.
--
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778 AIM: dfetter666 Yahoo!: dfetter
Skype: davidfetter XMPP: david.fetter@gmail.com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate

Attachments:

adp_testtext/plain; charset=us-asciiDownload