Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ltlkK-0005yM-Fj for pgsql-admin@arkaria.postgresql.org; Thu, 17 Jun 2021 06:43:25 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1ltlkJ-0003hu-GX for pgsql-admin@arkaria.postgresql.org; Thu, 17 Jun 2021 06:43:23 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ltlkJ-0003hk-1a for pgsql-admin@lists.postgresql.org; Thu, 17 Jun 2021 06:43:23 +0000 Received: from mail-eopbgr50052.outbound.protection.outlook.com ([40.107.5.52] helo=EUR03-VE1-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ltlkF-0000Z3-Jh for pgsql-admin@lists.postgresql.org; Thu, 17 Jun 2021 06:43:22 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hE/jJJ10ofT+1fpnOhPzB9enBslHyEQharXc67BEMw7WhLx6c+OjqESRz3f1pkyDmWclmsKc8e3wIzaJZMMIn/JjVQdoSKkFK/foBPWHLfBtF/xWP9kAwDi5cb+ZNMWgxU4AxrNUJh2RtntGkPI/yAawmtx+DUJY8/hWdLGKzIr9mC/0bw28W7Cifo03YliDmNRJr+GzZRvPgflQvWEakWNBxi5HtOLTQcEdld8MCziQQxVd0mf+mrp1mVaj7zAmaVj6tiMwTJBRTfqIQ8FMxzWEK4dhPdFg3ekG//SH+hOU4hXfb7ZH/MZxCFPpaSdvVkOJn9MheL+bLfBVW3cK2A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4VLP+skX5MkRJ5Y65HvVot1rGQb3zcefR/qiWWvE9og=; b=ZQv30HTp9bgh5WtzBNy7Ra5v1F7Ba6RexXwvU73jP1FyEgk+iJqRfm4wLClol4Avc/eeF+i3KkFXK5Sl8V67CxHGCxZFgTb/5gYsMgrhdP789TCEzpvv2tnY244oopE+LMhLZggruO2cpBGMgyVaC101/8eWHn1j30ueyqJDipS/XhBuIXOsS2Ngt1RX1H+SYeLqxAtEpwTfm1ZFXyg6Xpq66GrTlYjtP9JbEZ+DxaXaGaR9IoHIKGwlqh68G67MQuXXGpvh8IBwxmt6VWqKlPcX2DmCBN6RMAQ1+iGMhf6rfmTB2BL1cPSmGfkn1egvbn8yKUKr8BgfEWX2wSn86A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ucll.be; dmarc=pass action=none header.from=ucll.be; dkim=pass header.d=ucll.be; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ucll.be; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4VLP+skX5MkRJ5Y65HvVot1rGQb3zcefR/qiWWvE9og=; b=A+rWMYmM4mmahmPjhUP7PN29FNHzeBmfF8/WnrBWv5jNR48iTV7rHjsyzMPotHv7cY5JvY+HT9tfogGNQlAesH6R3RJOdo+RPz+9sWRLO5Bd9yaKlZ68YEDGEZaKl3Hm9MXk7izhcSDTgA5YwmMJXkOSLj63wPsFrtvC1tLtROg= Authentication-Results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=ucll.be; Received: from AM9P195MB0790.EURP195.PROD.OUTLOOK.COM (2603:10a6:20b:1ff::22) by AM0P195MB0482.EURP195.PROD.OUTLOOK.COM (2603:10a6:20b:163::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.19; Thu, 17 Jun 2021 06:43:16 +0000 Received: from AM9P195MB0790.EURP195.PROD.OUTLOOK.COM ([fe80::c40a:258e:1d00:c5ed]) by AM9P195MB0790.EURP195.PROD.OUTLOOK.COM ([fe80::c40a:258e:1d00:c5ed%9]) with mapi id 15.20.4242.019; Thu, 17 Jun 2021 06:43:16 +0000 Message-ID: Subject: Re: Baffled by basic permission issue. From: Wim Bertels Reply-To: wim.bertels@ucll.be To: Wells Oliver Cc: pgsql-admin@lists.postgresql.org Date: Thu, 17 Jun 2021 08:43:04 +0200 In-Reply-To: <805163.1623878495@sss.pgh.pa.us> References: <3AD88617-B7E7-4AF5-AE0B-05A79F88C2CC@jakobs.com> <805163.1623878495@sss.pgh.pa.us> Organization: UC Leuven-Limburg Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.30.5-1.1 Content-Transfer-Encoding: 7bit X-Originating-IP: [2a02:1811:526:1700:60e:3cff:feb0:7f7b] X-ClientProxiedBy: AM8P189CA0017.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:218::22) To AM9P195MB0790.EURP195.PROD.OUTLOOK.COM (2603:10a6:20b:1ff::22) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from ptr-7u36h5k51lesqlynxiz.18120a2.ip6.access.telenet.be (2a02:1811:526:1700:60e:3cff:feb0:7f7b) by AM8P189CA0017.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:218::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.15 via Frontend Transport; Thu, 17 Jun 2021 06:43:16 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 57d910d4-579c-40d1-9dfe-08d9315b2fe1 X-MS-TrafficTypeDiagnostic: AM0P195MB0482: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:8273; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: D13TDzhDe3Cfo7xYP87vqp6H0jqANP9llk5c3FRW1j7pFp9agJ5ILCBEwPQV0qizT9lqeS6dUbYn/vXOJ2aBnKEnPj3SLnQDQZOvhYZQsDtUeizC00Cyrt95rAMzILyJJBDnsZgZDgDUsKsoYsKSImIshQNMfPX+Nin/oM8UvrroYhAD6KhnPVAb5a7iCoXvRaOQWDCoNV8aL/EBH0Nbk3GCiZH1+PN1J2di1ENLZ8Y4p9z3vfgm+YExkTngmrdMOMlnM4BNn/PkbyX0MiXOxLyZlVipDywmyNP+e2v2raBWCbZ4JqbQeKc0aGumlBfTkporizzMsBM+/hTZZki+srX4uITBecdhg0BUSuayNFVqtgDeH6s74UJr7hasqVr2qXN1RN/K60HBHmvFiSPwXFSWSyQwDvzrl02APP0KwjkE4zjREqtfHyTiAeLN2kA5QpmHQxGD2uhq+w7VGQrsk4DS8h5YwCmrCTzX3V0f8mluPdWI4RN/VZejqYScdlAcujjZr00cloZs7/LuyJsff4KmhumRa4dzjODR+xtAd24kPysV4xgxbwug5Ib4PtFvO2J0p3CtMRpOR16NqG4ef5V7UwFFrEA3xA6wzQ0NsZ8= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM9P195MB0790.EURP195.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(4636009)(366004)(346002)(376002)(39850400004)(136003)(396003)(4326008)(86362001)(2616005)(8936002)(478600001)(5660300002)(6512007)(3450700001)(6916009)(6486002)(38100700002)(44832011)(6666004)(8676002)(2906002)(6506007)(786003)(316002)(66946007)(186003)(36916002)(52116002)(36756003)(16526019)(66556008)(66476007)(4744005);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?djQ4UDdaMURUVkhOOTE2cGRFSHNJUGE0NW9nQWpKcElWajZBOThmdGtNbDhx?= =?utf-8?B?aVQ2OUtoTlZ3Wm9kSHhrYmc0YmMxQTJKTXhwL0ZXVFR5bmZqanFLSnVMdExm?= =?utf-8?B?TU5BRDdZd0lQS0ZxV25HODFmSkFFNXJvNnU3WHFlV285eEZpem5iejJlaE5w?= =?utf-8?B?VTZpQVZPc0VnRlV2SWFVM0t3a0dpTktybmlqZlB3em1RLzBXUWpyVGF0Q0kr?= =?utf-8?B?QzNPZkw2WWxIS1R3b0xycVByMEkrZkgrRVI1RkVzcEcralU1bFFYSVNleGhY?= =?utf-8?B?V2h4Y21JS0lMTnpMU3Z0NjhKU3VHY2l6K3EyeUxjUmN4eGRSSHJaaHVGTE92?= =?utf-8?B?azRoSzdUWUpJWXErZTZpWWRkRWw2N25NdkhBL1JLM0dzbkNZUS9KVXhBekda?= =?utf-8?B?SXFYd2FmVzFseWlMTndxTVBVUno0RHFoWnBxb29xRGpzK2xESHhHVFV0L2kz?= =?utf-8?B?dCs0NitVVkpiS3Y1VEhObEpVdXZKUU9tcGZiN013RzY4eHUvSTk2WkIyRVVs?= =?utf-8?B?OWJrWnFVdEhFSzR0SWh1SlJBczBsa25oQ2JQUjFpVks1OU9iR1UyMkJ1dXR6?= =?utf-8?B?N1pDMnZ6RGFHZStMQndsN2RiQm9XWUlKcUV5djVFWE1MekowUUhPQTdqeDFG?= =?utf-8?B?QWZOcFJwZG5tZWV4U3FRUlM2SDNrOEZoMytQdGhiY2oyWCtubFFndXJHOEpu?= =?utf-8?B?UlZ5aWZ5cGRMaHFaMnppeno5aUJPY1pJQ2dXZmdMSE1UbUNoZDFabmUyaHBN?= =?utf-8?B?Wnc3T0I2RldPaEsxWmlMamw0MFNPYTNRNjJ5ZUZ1Zll0a1BJNXZtZGVKM3N5?= =?utf-8?B?Y0hJMm9xbC9BcDRuazhSYnlvT1J3S2x0azZWTmgxU3FqWFdhS1hKQWh3WmZw?= =?utf-8?B?eDNuenQ1UEFmRDZsOTZoelNPdWtBd1pDOUZEYmRiNnZRZUlPakFoVjFzREcr?= =?utf-8?B?TFBHUVhqeHNVMWhvbXh2eFpGajJkM2djZEVJNDkxS1BWT0pMazBwa0tRRDJo?= =?utf-8?B?azJWRHRSV1N1OVN6K0Q1VS9LSmg4QjFGcEErSnMvOFJJL01DaEkrNkxueTV0?= =?utf-8?B?ZzF2ck9UbitHeGh4UWVrZ0tndlpkc3RFZHdEM3dwMjd4S3pjbTllV2ZjTTFi?= =?utf-8?B?Y3B2Q1FncnJsNjlscTdPNmtBdndZenZ5VTR1SXp1TmdGV2V5bUFNenRWQXVJ?= =?utf-8?B?TXd5NnVuR0VhWVFnNnpaalFPSVAxWXdEZ1RqdmhKZ0RkTXIvb01HY1RmaVdK?= =?utf-8?B?Y2xvdUdkejlBanh3VzRkMStuVVZvRmNSMGRWUUVaWUdpcGFDSVowb0pxdXlr?= =?utf-8?B?aFltMkoyREJnRjNXUHBWOEZoQ09rMVhyZ3o2SHlQUVNDSmlsUXNOYjdJK2pL?= =?utf-8?B?ZFJ3WTFmZ2tteHgvbWpLYkFYcjZoSG1kSCtKZGg3cFN3WkhHNWtkVWtlcTZn?= =?utf-8?B?VFp6eDhxYWRubGlUUTM1SkF5RVdaZGJpcFovMnkvbkRmcXJEQzdPUFRrOGND?= =?utf-8?B?S2xlQXFXZnVaNGtVQzZQTkZBNlRJQUpEdjNDWXU1Y1VxOGRjSktmNWhjR09j?= =?utf-8?B?S3JpRkFKallHVmVGSTE1czlKaGE2RUdhN3ozVmt3VVRveEJqdjNpM21BMkZR?= =?utf-8?B?a1ZjUDdMS1BDeW1BOHFGSS9WYlV5MzhmOWJYVmZWM2dKWlRFRTJwTW80dDlm?= =?utf-8?B?R21pTFhScGRxVlczUk5DNGFMSEVDcytwZSt3NGxpU1krb2lhZjhONHRqS3dC?= =?utf-8?B?NzJQbE5vTmR2bGc2RllST2dBeTljaG5NTERDOFNwL045blBzZC84WUJqQ1Ro?= =?utf-8?B?WXlRY2hmUEJJdVRBbWxSYjVHS2lZQjEvUjg5OGhNQ2xyOGlwSFRmUDdVbnZQ?= =?utf-8?Q?+ZzSB95F6M/5o?= X-OriginatorOrg: ucll.be X-MS-Exchange-CrossTenant-Network-Message-Id: 57d910d4-579c-40d1-9dfe-08d9315b2fe1 X-MS-Exchange-CrossTenant-AuthSource: AM9P195MB0790.EURP195.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jun 2021 06:43:16.5960 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: e638861b-15d9-4de6-a65d-b48789ae1f08 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 3/hKX0To72dA+UMsoNGpQ5iKNvFiRetp+2vw/UbwOYgmjdgUsIBQvxsGqyWSyNkVz9HKXltMbFE2UFI8X3g1NQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P195MB0482 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Tom Lane schreef op wo 16-06-2021 om 17:21 [-0400]: > > When you select from a view, you need permissions only on the view. > The view's owner needs permissions on the underlying table(s). > This is so that views can act as permission gateways. additionally, if you want to allow modifications through this view, have a look at 'with check option' to avoid unwanted permission side- effects > > regards, tom lane > > -- mvg, Wim Bertels