Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
From: John Scalia <jayknowsunix@gmail.com>
Mime-Version: 1.0 (1.0)
Subject: Re: User granted all access to schema, but can't see tables
Date: Fri, 18 Dec 2020 07:26:30 -0500
Message-Id: <41AFAC73-A145-4EAC-B211-70D12AFD7D77@gmail.com>
References: <0bfc7514-e4ee-375e-be44-24479e728adc@gmail.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
In-Reply-To: <0bfc7514-e4ee-375e-be44-24479e728adc@gmail.com>
To: Ron <ronljohnsonjr@gmail.com>
Precedence: bulk

Does the stansuser have connect privileges to the actual database where the s=
chema and tables are?

GRANT connect ON DATABASE <stans_whatever> TO stansuser;

Note that since you didn=E2=80=99t tell us what the database name is here, y=
ou=E2=80=99ll need to substitute the actual name of it where I indicated <st=
ans_whatever>.
=E2=80=94
Jay

Sent from my iPad

> On Dec 18, 2020, at 7:07 AM, Ron <ronljohnsonjr@gmail.com> wrote:
>=20
> =EF=BB=BFThis is v12 from RHEL repos.
>=20
> As user postgres, I run:
>=20
> sides=3D# grant all on SCHEMA strans TO stransuser;
> GRANT
>=20
> sides=3D# ALTER DEFAULT PRIVILEGES IN SCHEMA strans GRANT all on tables to=
 stransuser;
> ALTER DEFAULT PRIVILEGES
>=20
> sides=3D# GRANT USAGE ON SCHEMA strans TO stransuser;
> GRANT
>=20
> But user stransuser still can=E2=80=99t access tables
>=20
> sides=3D> \d
>              List of relations
> Schema |    Name    |   Type   |  Owner
> --------+------------+----------+----------
> strans | foo        | table    | postgres
> strans | foo_id_seq | sequence | postgres
> (2 rows)
>=20
> sides=3D> select * from strans.foo;
> ERROR:  permission denied for table foo
>=20
> sides=3D> \z strans.foo
>                                 Access privileges
> Schema | Name | Type  |     Access privileges     | Column privileges | Po=
licies
> --------+------+-------+---------------------------+-------------------+--=
--------
> strans | foo  | table | postgres=3DarwdDxt/postgres+|                   |
>        |      |       | READWRITE=3DarwdD/postgres +|                   |
>        |      |       | READONLY=3Dr/postgres |                   |
> (1 row)
>=20
> What am I missing?
>=20
> --=20
> Angular momentum makes the world go 'round.
>=20
>=20