Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Subject: BUG #19682: Unable to drop a user with default privileges revoked
To: pgsql-bugs@lists.postgresql.org
From: PG Bug reporting form <noreply@postgresql.org>
Cc: ext.solutec.sperraud@grandlyon.com
Reply-To: ext.solutec.sperraud@grandlyon.com, pgsql-bugs@lists.postgresql.org
Date: Wed, 09 Sep 2026 09:29:50 +0000
Message-ID: <19682-21342a50fcf153e5@postgresql.org>
Auto-Submitted: auto-generated
Archived-At: 
 <https://www.postgresql.org/message-id/19682-21342a50fcf153e5%40postgresql.org>
Precedence: bulk

The following bug has been logged on the website:

Bug reference:      19682
Logged by:          Sylvain Perraud
Email address:      ext.solutec.sperraud@grandlyon.com
PostgreSQL version: 18.4
Operating system:   RHEL 9.8
Description:       =20

Hello,

Scenario 1 : create a user alpha then grant default privileges to himself

test=3D# create user alpha;
CREATE ROLE
test=3D# \ddp alpha
         Default access privileges
 Owner | Schema | Type | Access privileges
-------+--------+------+-------------------
(0 rows)

test=3D#  ALTER DEFAULT PRIVILEGES FOR ROLE alpha GRANT ALL ON TABLES to
alpha;
ALTER DEFAULT PRIVILEGES
test=3D# \ddp alpha
         Default access privileges
 Owner | Schema | Type | Access privileges
-------+--------+------+-------------------
(0 rows)

test=3D# drop user alpha;
DROP ROLE

Conclusion 1 : Drop is working

***************************************************************************=
***************************************************************************=
*****************************
Scenario 2 : create a user alpha then revoke default privileges from himself
test=3D# create user alpha;
CREATE ROLE
test=3D#  ALTER DEFAULT PRIVILEGES FOR ROLE alpha REVOKE  ALL ON TABLES FROM
alpha;
ALTER DEFAULT PRIVILEGES
test=3D# \ddp alpha
         Default access privileges
 Owner | Schema | Type  | Access privileges
-------+--------+-------+-------------------
 alpha |        | table | (none)
(1 row)

test=3D# drop user alpha;
ERROR:  role "alpha" cannot be dropped because some objects depend on it
DETAIL:  owner of default privileges on new relations belonging to role
alpha

Conclusion 2 : Drop is not working
***************************************************************************=
***************************************************************************=
*****************************
Scenario 3 : create a user alpha and beta then grant default privileges to
both users
test=3D# create user alpha;
CREATE ROLE
test=3D# create user beta;
CREATE ROLE
test=3D#  ALTER DEFAULT PRIVILEGES FOR ROLE alpha GRANT ALL ON TABLES to be=
ta;
ALTER DEFAULT PRIVILEGES
test=3D# \ddp alpha
          Default access privileges
 Owner | Schema | Type  |  Access privileges
-------+--------+-------+---------------------
 alpha |        | table | beta=3DarwdDxtm/alpha
(1 row)

test=3D#  ALTER DEFAULT PRIVILEGES FOR ROLE alpha GRANT ALL ON TABLES to
alpha;
ALTER DEFAULT PRIVILEGES
test=3D# \ddp alpha
           Default access privileges
 Owner | Schema | Type  |  Access privileges
-------+--------+-------+----------------------
 alpha |        | table | alpha=3DarwdDxtm/alpha+
       |        |       | beta=3DarwdDxtm/alpha
(1 row)

test=3D# drop user alpha;
ERROR:  role "alpha" cannot be dropped because some objects depend on it
DETAIL:  owner of default privileges on new relations belonging to role
alpha

test=3D#  ALTER DEFAULT PRIVILEGES FOR ROLE alpha REVOKE  ALL ON TABLES FROM
beta;
ALTER DEFAULT PRIVILEGES
test=3D# \ddp alpha
         Default access privileges
 Owner | Schema | Type | Access privileges
-------+--------+------+-------------------
(0 rows)

test=3D# drop user alpha;
DROP ROLE

Conclusion 3 : Drop is working whereas DEFAULT PRIVILEGES are still granted
to alpha