From: Tom Lane <tgl@sss.pgh.pa.us>
To: "David G. Johnston" <david.g.johnston@gmail.com>
cc: Teju Jakkidi vlogs <teja.jakkidi05@gmail.com>,
        pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: Alter default privileges is not working for roles
In-reply-to: 
 <CAKFQuwbdbeRauJwo6RMS1aBq5yVnUAbwOQQs7B=n89RKTLbD9w@mail.gmail.com>
References: 
 <CAKA2XvY8sH6u8454AYjqd-zXA1B=aW=PcFfcbEoPiD6OzPEtSA@mail.gmail.com>
 <CAKFQuwbdbeRauJwo6RMS1aBq5yVnUAbwOQQs7B=n89RKTLbD9w@mail.gmail.com>
Comments: In-reply-to "David G. Johnston" <david.g.johnston@gmail.com>
	message dated "Wed, 22 Feb 2023 11:32:58 -0700"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <285757.1677099811.1@sss.pgh.pa.us>
Date: Wed, 22 Feb 2023 16:03:31 -0500
Message-ID: <285758.1677099811@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/285758.1677099811%40sss.pgh.pa.us>
Precedence: bulk

"David G. Johnston" <david.g.johnston@gmail.com> writes:
> On Wed, Feb 22, 2023 at 10:53 AM Teju Jakkidi vlogs <
> teja.jakkidi05@gmail.com> wrote:
>> alter default privileges for role ownerrole
>> Now our expectation is that if there is any table created by any user

> The specification of "ownerrole" in that command means that said default
> privileges only are created if "ownerrole" is the one creating the objects
> - not "created by any user".

It's hard to say for sure when we've been shown no details, but
I suspect what the OP is describing is event triggers that issue
ALTER OWNER commands after the fact.  The default privileges
mechanism is only applied at the instant of object creation;
we do not want ALTER OWNER or SET SCHEMA or similar commands
having random side-effects on existing privileges.

			regards, tom lane