Subject: Re: Create multiple users, to have all privileges on each others
 objects/relations
To: pgsql-admin@lists.postgresql.org
References: 
 <CAG-jOyBFV-n+M=eS7oP4-wEizaHmVr9ZY2YfDCpU9_joQp9j6w@mail.gmail.com>
From: Ron <ronljohnsonjr@gmail.com>
Message-ID: <ff5dd1b5-03b1-8c24-7346-8c7d11248efa@gmail.com>
Date: Sun, 15 Nov 2020 10:16:21 -0600
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: 
 <CAG-jOyBFV-n+M=eS7oP4-wEizaHmVr9ZY2YfDCpU9_joQp9j6w@mail.gmail.com>
Content-Type: multipart/alternative;
 boundary="------------7F89CB4B9D55D72E4E53862D"
Content-Language: en-US
Precedence: bulk

This is a multi-part message in MIME format.
--------------7F89CB4B9D55D72E4E53862D
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

On 11/15/20 9:46 AM, otar shavadze wrote:
> Hello,
> How can create multi users so, that they all have permissions on each 
> others DB objects ?
> What I did (From "postgres" user):
>
> CREATE ROLE postgres_subuser1 PASSWORD 'some_password';
> CREATE ROLE postgres_subuser2 PASSWORD 'some_password';
>
> ALTER DEFAULT PRIVILEGES FOR ROLE postgres_subuser1 GRANT ALL PRIVILEGES 
> ON TABLES TO postgres_subuser1;
> ALTER DEFAULT PRIVILEGES FOR ROLE postgres_subuser2 GRANT ALL PRIVILEGES 
> ON TABLES TO postgres_subuser2;
>
>
> Then  I logged in with "postgres_subuser1" and created table "table1".
> Then  I logged in with "postgres_subuser2" and tried: "SELECT COUNT(*) 
> FROM table1". This gives error:  "|permission denied for table table1"
>
> |Tell please, What is my mistake?

Try creating a "group" role, and then "user" roles which inherit from the 
"group" role.


-- 
Angular momentum makes the world go 'round.

--------------7F89CB4B9D55D72E4E53862D
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    On 11/15/20 9:46 AM, otar shavadze wrote:<br>
    <blockquote type="cite"
cite="mid:CAG-jOyBFV-n+M=eS7oP4-wEizaHmVr9ZY2YfDCpU9_joQp9j6w@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">Hello,<br>
        How can create multi users so, that they all have permissions on
        each others DB objects ?<br>
        What I did (From "postgres" user):<br>
        <br>
        CREATE ROLE postgres_subuser1 PASSWORD 'some_password';<br>
        CREATE ROLE postgres_subuser2 PASSWORD 'some_password';<br>
        <br>
        ALTER DEFAULT PRIVILEGES FOR ROLE postgres_subuser1 GRANT ALL
        PRIVILEGES ON TABLES TO postgres_subuser1;<br>
        ALTER DEFAULT PRIVILEGES FOR ROLE postgres_subuser2 GRANT ALL
        PRIVILEGES ON TABLES TO postgres_subuser2;<br>
        <br>
        <br>
        Then  I logged in with "postgres_subuser1" and created table
        "table1".<br>
        Then  I logged in with "postgres_subuser2" and tried: "SELECT
        COUNT(*) FROM table1". This gives error:  "<code>permission
          denied for table table1"<br>
          <br>
        </code>Tell please, What is my mistake?<br>
      </div>
    </blockquote>
    <br>
    Try creating a "group" role, and then "user" roles which inherit
    from the "group" role.<br>
    <br>
    <br>
    <div class="moz-signature">-- <br>
      Angular momentum makes the world go 'round.</div>
  </body>
</html>

--------------7F89CB4B9D55D72E4E53862D--