Re: Default Privilege Table ANY ROLE

2018-11-21 Thread Nicolas Paris
On Fri, Nov 16, 2018 at 03:17:59PM -0500, Tom Lane wrote: > Stephen Frost writes: > > There was much discussion of being able to have 'FOR ALL ROLES' or > > similar for ALTER DEFAULT PRIVILEGES when it went in, but there was a > > lot of concern about one user getting to define the default

Re: Default Privilege Table ANY ROLE

2018-11-16 Thread Tom Lane
Stephen Frost writes: > There was much discussion of being able to have 'FOR ALL ROLES' or > similar for ALTER DEFAULT PRIVILEGES when it went in, but there was a > lot of concern about one user getting to define the default privileges > for objects created by some other user. Yeah, it's hard to

Re: Default Privilege Table ANY ROLE

2018-11-16 Thread Stephen Frost
Greetings, * Tom Lane (t...@sss.pgh.pa.us) wrote: > Maybe I'm missing something, but doesn't this solve your problem > as stated? > > ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO public; That just means that the 'ROLE' in the result is the current role, as per the docs:

Re: Default Privilege Table ANY ROLE

2018-11-15 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 03:19:00PM +0100, Nicolas Paris wrote: > Hi > > I d'like my user be able to select on any new table from other users. > > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" GRANT > > select ON TABLES TO "myuser" > > ALTER DEFAULT PRIVILEGES FOR

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 03:53:39PM -0500, Tom Lane wrote: > Maybe I'm missing something, but doesn't this solve your problem > as stated? > > ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO public; Not sure that's equivalent to what I am looking for below (but is not

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Tom Lane
Maybe I'm missing something, but doesn't this solve your problem as stated? ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO public; regards, tom lane

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 09:04:44PM +0100, Laurenz Albe wrote: > Nicolas Paris wrote: > > I d'like my user be able to select on any new table from other users. > > > > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" > > > GRANT select ON TABLES TO "myuser" > > > ALTER

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Laurenz Albe
Nicolas Paris wrote: > I d'like my user be able to select on any new table from other users. > > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" GRANT > > select ON TABLES TO "myuser" > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner2" IN SCHEMA "myschema" GRANT > >