postgres.git / summary / log / commit / refs

commit    272db03bb9d5fbf55cfe39776973dae72cb4bec7
Author:   Bruce Momjian <bruce@momjian.us>
Date:     Fri Nov 03 13:51:52 2023 +0000
First released in: 17.0, 11.22, 12.17, 13.13, 14.10, 15.5, 16.1

    doc:  ALTER DEFAULT PRIVILEGES does not affect inherited roles
    
    Reported-by: Jordi GutiƩrrez Hermoso
    
    Discussion: https://postgr.es/m/72652d72e1816bfc3c05d40f9e0e0373d07823c8.camel@octave.org
    
    Co-authored-by: Laurenz Albe
    
    Backpatch-through: 11


doc/src/sgml/ref/alter_default_privileges.sgml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/src/sgml/ref/alter_default_privileges.sgml b/doc/src/sgml/ref/alter_default_privileges.sgml index 4a4878c4380..a2849c8c770 100644 --- a/doc/src/sgml/ref/alter_default_privileges.sgml +++ b/doc/src/sgml/ref/alter_default_privileges.sgml @@ -137,7 +137,11 @@ REVOKE [ GRANT OPTION FOR ] <listitem> <para> The name of an existing role of which the current role is a member. - If <literal>FOR ROLE</literal> is omitted, the current role is assumed. + Default access privileges are not inherited, so member roles + must use <command>SET ROLE</command> to access these privileges, + or <command>ALTER DEFAULT PRIVILEGES</command> must be run for + each member role. If <literal>FOR ROLE</literal> is omitted, + the current role is assumed. </para> </listitem> </varlistentry> [parent: 6e1cca511348]