User privileges

"Mihai Gheorghiu" <tanethq@earthlink.net> writes:

It is possible that a user is a member of more than one group.
Do this user's privileges AND or OR the privileges of each of the two
groups?

OR. A user's privileges are always the union of what he has personally
and what he has via any group. See aclcheck() in
src/backend/catalog/aclchk.c: it keeps looking for any way to grant
permission.

regards, tom lane