Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id F2E2164FF13 for ; Mon, 20 Oct 2008 19:50:29 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 18597-07 for ; Mon, 20 Oct 2008 19:50:26 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by postgresql.org (Postfix) with ESMTP id 972AC64FF05 for ; Mon, 20 Oct 2008 19:50:26 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id m9KMoOfx005695; Mon, 20 Oct 2008 18:50:24 -0400 (EDT) To: FM cc: pgsql-admin@postgresql.org Subject: Re: Privileges on sequences In-reply-to: <48FCE2F5.5090902@lexum.umontreal.ca> References: <48FCE2F5.5090902@lexum.umontreal.ca> Comments: In-reply-to FM message dated "Mon, 20 Oct 2008 15:58:45 -0400" Date: Mon, 20 Oct 2008 18:50:24 -0400 Message-ID: <5694.1224543024@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200810/142 X-Sequence-Number: 30598 FM writes: > BUT if I grant the same priv to the group (that include the user) : > SELECT nextval('reflex_cited_reports_id'); > ERROR: permission denied for sequence reflex_cited_reports_id Works for me ... regression=# create sequence s1; CREATE SEQUENCE regression=# create user u1; CREATE ROLE regression=# \c - u1 You are now connected to database "regression" as user "u1". regression=> select nextval('s1'); ERROR: permission denied for sequence s1 regression=> \c - postgres You are now connected to database "regression" as user "postgres". regression=# create group g1; CREATE ROLE regression=# grant g1 to u1; GRANT ROLE regression=# grant all on sequence s1 to g1; GRANT regression=# \c - u1 You are now connected to database "regression" as user "u1". regression=> select nextval('s1'); nextval --------- 1 (1 row) regression=> regards, tom lane