Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kqEXj-0002AV-JZ for pgsql-admin@arkaria.postgresql.org; Fri, 18 Dec 2020 12:07:31 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kqEXi-0003ST-ED for pgsql-admin@arkaria.postgresql.org; Fri, 18 Dec 2020 12:07:30 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kqEXi-0003SM-4M for pgsql-admin@lists.postgresql.org; Fri, 18 Dec 2020 12:07:30 +0000 Received: from mail-oi1-x230.google.com ([2607:f8b0:4864:20::230]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1kqEXe-0006T2-LT for pgsql-admin@postgresql.org; Fri, 18 Dec 2020 12:07:29 +0000 Received: by mail-oi1-x230.google.com with SMTP id s2so2586703oij.2 for ; Fri, 18 Dec 2020 04:07:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=Df7Uj8djTWxYNwy7eRqfZkdIzbKdMz4SYwYHPCkyZu0=; b=C7iYjoP1DZM2Z2lJvZj85f/TZe+EmKrjyBqbDp8ZDA3mrVp+4rdtBqRIjLbkzfqWSh mS55ox2wHiEnLG0/Kk7oOkHnxT1SwE46j2JLlBaR8BrIE+wTtgS4Itmeb/jo/cI3QkFg Rfsp4pCNcQPjpBu5ZINEqVcKCPMTyZYUQCsgPvmCO2njETQ37SgmPhBfftuLRioqR8ag +YIaFEU5RZUmuQ8ZHpuWCRBCfAVWrYtQF7Aubtb5r9bdulcHSp5vbKm3HN/xQMdLPCpK +Sbghrl9tY8wepYnbecqOsrrbbJBzV0OBwPkovb2+a1BzCxx0d2SXoR5NAImtoHCvePe RMsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=Df7Uj8djTWxYNwy7eRqfZkdIzbKdMz4SYwYHPCkyZu0=; b=alOtnO/rLqvgB+fedzX8B4MiVM9DySqdRdWth9Wv5M+V9qoJoNS6qnYdxxlHCAFIap Daz7pEGKMvd7td5yZ8cM+zJgV0MPvFtbojOI2hrt+QDOMIG3/cygR+Tp/+vLUzkrpoyo Fv632lcfuXCr4waS220CnftEmGioFWvtQgDMwetJqC5o0FGdpK7yU+Mc37g4DteJDe7E kcaLOAJf+m33Wa2IOAf+vHufxf6PK/r+Fhsk9kPCGd16UhFRRimIUpuWgzsR96/JUW9g 9+OnOp9hyK2YYNU5nOI5BJesBfxE1RxYZuBdhKnYx0FIBquw9D1JhQQXjD/LoiOVKc/W k11A== X-Gm-Message-State: AOAM532dzTh12Dfh6UOi7D6YaUEvkAY/CDpBMwRciQzpc1Pfhcscf6+w IzDpVEffpwBhaY+C36VVQDuo2D/qt+sB4Q== X-Google-Smtp-Source: ABdhPJwySVW11za1qWe3A3mlb/9+g3BwZQatsvysPg7wpz/u7Bwl1eD42w3qMdDhq6gnu9ELMtGRgg== X-Received: by 2002:aca:ec13:: with SMTP id k19mr2461468oih.97.1608293244293; Fri, 18 Dec 2020 04:07:24 -0800 (PST) Received: from [192.168.1.10] (ip174-67-141-204.no.no.cox.net. [174.67.141.204]) by smtp.googlemail.com with ESMTPSA id r4sm1851951ooa.29.2020.12.18.04.07.23 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 18 Dec 2020 04:07:23 -0800 (PST) To: pgsql-admin From: Ron Subject: User granted all access to schema, but can't see tables Message-ID: <0bfc7514-e4ee-375e-be44-24479e728adc@gmail.com> Date: Fri, 18 Dec 2020 06:07:21 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk This is v12 from RHEL repos. As user postgres, I run: sides=# grant all on SCHEMA strans TO stransuser; GRANT sides=# ALTER DEFAULT PRIVILEGES IN SCHEMA strans GRANT all on tables to stransuser; ALTER DEFAULT PRIVILEGES sides=# GRANT USAGE ON SCHEMA strans TO stransuser; GRANT But user stransuser still can’t access tables sides=> \d              List of relations Schema |    Name    |   Type   |  Owner --------+------------+----------+---------- strans | foo        | table    | postgres strans | foo_id_seq | sequence | postgres (2 rows) sides=> select * from strans.foo; ERROR:  permission denied for table foo sides=> \z strans.foo                                 Access privileges Schema | Name | Type  |     Access privileges     | Column privileges | Policies --------+------+-------+---------------------------+-------------------+---------- strans | foo  | table | postgres=arwdDxt/postgres+|                   |        |      |       | READWRITE=arwdD/postgres +|                   |        |      |       | READONLY=r/postgres |                   | (1 row) What am I missing? -- Angular momentum makes the world go 'round.