public inbox for [email protected]  
help / color / mirror / Atom feed
From: Fujii Masao <[email protected]>
To: [email protected]
Subject: pgsql: Extend ALTER DEFAULT PRIVILEGES to define default privileges for
Date: Fri, 04 Apr 2025 10:04:31 +0000
Message-ID: <[email protected]> (raw)

Extend ALTER DEFAULT PRIVILEGES to define default privileges for large objects.

Previously, ALTER DEFAULT PRIVILEGES did not support large objects.
This meant that to grant privileges to users other than the owner,
permissions had to be manually assigned each time a large object
was created, which was inconvenient.

This commit extends ALTER DEFAULT PRIVILEGES to allow defining default
access privileges for large objects. With this change, specified privileges
will automatically apply to newly created large objects, making privilege
management more efficient.

As a side effect, this commit introduces the new keyword OBJECTS
since it's used in the syntax of ALTER DEFAULT PRIVILEGES.

Original patch by Haruka Takatsuka, with some fixes and tests by Yugo Nagata,
and rebased by Laurenz Albe.

Author: Takatsuka Haruka <[email protected]>
Co-authored-by: Yugo Nagata <[email protected]>
Co-authored-by: Laurenz Albe <[email protected]>
Reviewed-by: Masao Fujii <[email protected]>
Discussion: https://postgr.es/m/[email protected]

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/0d6c4776647feeee26f3e29fff6a5edb222fa260

Modified Files
--------------
doc/src/sgml/catalogs.sgml                     |  3 +-
doc/src/sgml/ref/alter_default_privileges.sgml | 19 +++++-
src/backend/catalog/aclchk.c                   | 21 ++++++
src/backend/catalog/objectaddress.c            | 18 ++++-
src/backend/catalog/pg_largeobject.c           | 18 ++++-
src/backend/parser/gram.y                      |  5 +-
src/bin/pg_dump/dumputils.c                    |  3 +-
src/bin/pg_dump/pg_dump.c                      |  3 +
src/bin/psql/describe.c                        |  6 +-
src/bin/psql/tab-complete.in.c                 |  2 +-
src/include/catalog/pg_default_acl.h           |  1 +
src/include/parser/kwlist.h                    |  1 +
src/test/regress/expected/privileges.out       | 94 +++++++++++++++++++++++++-
src/test/regress/sql/privileges.sql            | 36 ++++++++++
14 files changed, 217 insertions(+), 13 deletions(-)



reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: pgsql: Extend ALTER DEFAULT PRIVILEGES to define default privileges for
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox