On Tue, Nov 22, 2016 at 08:59:09AM -0200, Matheus de Oliveira wrote: > Hi all, > > I noticed that we have no option to set default privileges for newly > created schemas, other than calling GRANT explicitly. At work I use ALTER > DEFAULT PRIVILEGE (ADP) command extensively, as the developers are > permitted to manage DDL on the databases, and all work fine except for when > a new schema is created. So,I'd like to propose this very simple patch > (attached) that adds the capability of using SCHEMAS, adding the following > syntax to ADP: > > ALTER DEFAULT PRIVILEGES > [ FOR { ROLE | USER } target_role [, ...] ] > abbreviated_grant_or_revoke > > where abbreviated_grant_or_revoke is one of: > > GRANT { USAGE | CREATE | ALL [ PRIVILEGES ] } > ON SCHEMAS > TO { [ GROUP ] role_name | PUBLIC } [, ...] [ WITH GRANT OPTION ] > > REVOKE [ GRANT OPTION FOR ] > { USAGE | CREATE | ALL [ PRIVILEGES ] } > ON SCHEMAS > FROM { [ GROUP ] role_name | PUBLIC } [, ...] > [ CASCADE | RESTRICT ]
I'd love to have this available. Best, David. -- David Fetter <david(at)fetter(dot)org> http://fetter.org/ Phone: +1 415 235 3778 AIM: dfetter666 Yahoo!: dfetter Skype: davidfetter XMPP: david(dot)fetter(at)gmail(dot)com Remember to vote! Consider donating to Postgres: http://www.postgresql.org/about/donate -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers