MIME-Version: 1.0
References: 
 <CA+wokJ9ApXRPQPoppfsSj0htM_dwSqjQ_RoWXdGb3RqRUtcmmQ@mail.gmail.com>
 <CAKFQuwY8+JZe1KDh25LrqxbKNe-sVp265K5vFdzMXG1EHOcmhw@mail.gmail.com>
In-Reply-To: 
 <CAKFQuwY8+JZe1KDh25LrqxbKNe-sVp265K5vFdzMXG1EHOcmhw@mail.gmail.com>
From: Edwin UY <edwin.uy@gmail.com>
Date: Sun, 15 Jun 2025 22:06:11 +1200
Message-ID: 
 <CA+wokJ_kPqs0RmKo3gFurJnb4P2zVe2_oA8b_RU7kHgughFfRw@mail.gmail.com>
Subject: Re: GRANT USAGE ON SCHEMA
To: "David G. Johnston" <david.g.johnston@gmail.com>
Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000f84df10637996f27"
Archived-At: 
 <https://www.postgresql.org/message-id/CA%2BwokJ_kPqs0RmKo3gFurJnb4P2zVe2_oA8b_RU7kHgughFfRw%40mail.gmail.com>
Precedence: bulk

--000000000000f84df10637996f27
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi David J,

Yeah, sorry, I should have used different names, but yeah, I have also
created the a and b roles named the same as the schema.
Should have used schema_a, schema_b, role_a, role_b.


On Sun, Jun 15, 2025 at 11:19=E2=80=AFAM David G. Johnston <
david.g.johnston@gmail.com> wrote:

> On Sat, Jun 14, 2025 at 3:09=E2=80=AFPM Edwin UY <edwin.uy@gmail.com> wro=
te:
>
>> I thought it was supposed to all 'full' access of one schema to the othe=
r
>>
>
> Where did you get the idea that objects (aside from roles) ever get
> privileges on other objects?  Or did you also create roles "a" and "b" an=
d
> are just using the wrong terminology here?
>
> There is also no such thing as permissions on one type of object somehow
> affecting your privileges on other object types.  Your privileges on
> schemas will not influence (directly) your permissions on tables.  Neithe=
r
> to grant additional privileges or to block them - say if you don't have
> usage on schema but do have select on a contained table.  Corner-cases th=
at
> do behave this way notwithstanding - it isn't reliable.
>
> David J.
>
>

--000000000000f84df10637996f27
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi David J,</div><div><br></div><div>Yeah, sorry, I s=
hould have used different names, but yeah, I have also created the a and b =
roles named the same as the schema.</div><div>Should have used schema_a, sc=
hema_b, role_a, role_b.</div><div><br></div><div><br></div></div><br><div c=
lass=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_=
attr">On Sun, Jun 15, 2025 at 11:19=E2=80=AFAM David G. Johnston &lt;<a hre=
f=3D"mailto:david.g.johnston@gmail.com">david.g.johnston@gmail.com</a>&gt; =
wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0=
px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=
=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family=
:arial,helvetica,sans-serif"><span style=3D"font-family:Arial,Helvetica,san=
s-serif">On Sat, Jun 14, 2025 at 3:09=E2=80=AFPM Edwin UY &lt;<a href=3D"ma=
ilto:edwin.uy@gmail.com" target=3D"_blank">edwin.uy@gmail.com</a>&gt; wrote=
:</span></div></div><div class=3D"gmail_quote"><blockquote class=3D"gmail_q=
uote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,2=
04);padding-left:1ex"><div dir=3D"ltr"><span style=3D"font-family:monospace=
">I thought it was supposed=C2=A0to all &#39;full&#39; access of one schema=
 to the other</span></div></blockquote><div>=C2=A0</div><div><div class=3D"=
gmail_default" style=3D"font-family:arial,helvetica,sans-serif">Where did y=
ou get the idea that objects (aside from roles) ever get privileges on othe=
r objects?=C2=A0 Or did you also create roles &quot;a&quot; and &quot;b&quo=
t; and are just using the wrong terminology here?</div><div class=3D"gmail_=
default" style=3D"font-family:arial,helvetica,sans-serif"><br></div></div><=
div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif=
">There is also no such thing as permissions on one type of object somehow =
affecting your privileges on other object=C2=A0types.=C2=A0 Your privileges=
 on schemas will not influence (directly) your permissions on tables.=C2=A0=
 Neither to grant additional privileges or to block them - say if you don&#=
39;t have usage on schema but do have select on a contained table.=C2=A0 Co=
rner-cases that do behave this way notwithstanding - it isn&#39;t reliable.=
</div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,san=
s-serif"><br></div><div class=3D"gmail_default" style=3D"font-family:arial,=
helvetica,sans-serif">David J.</div><div class=3D"gmail_default" style=3D"f=
ont-family:arial,helvetica,sans-serif"><br></div><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=
,204);padding-left:1ex">
</blockquote></div></div>
</blockquote></div>

--000000000000f84df10637996f27--