From: Tom Lane <tgl@sss.pgh.pa.us>
To: buck@dbrhino.com
Cc: pgsql-docs@postgresql.org
Subject: Re: Document PUBLIC grants on PUBLIC schema
Date: Tue, 03 Oct 2017 11:12:13 -0400
Message-ID: <12403.1507043533@sss.pgh.pa.us> (raw)
In-Reply-To: <20170930141856.28561.80812@wrigleys.postgresql.org>
References: <20170930141856.28561.80812@wrigleys.postgresql.org>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-docs>
buck@dbrhino.com writes:
> The GRANT documentation, regarding the PUBLIC role, says:
> > No privileges are granted to PUBLIC by default on tables, columns, schemas
> or tablespaces.
> But the PUBLIC role does receive USAGE and CREATE privileges on the PUBLIC
> schema, correct? I think the documentation should point this out.
The GRANT page is meant to explain what happens when you create new
objects. It does not attempt to explain the privileges attached to every
predefined object, and that seems like a rather impractical thing to do
there. We tend to document nondefault privileges for built-in objects
where those objects are described. In the case of the public schema,
it's described here:
https://www.postgresql.org/docs/current/static/ddl-schemas.html#DDL-SCHEMAS-PUBLIC
but since privileges for schemas haven't been mentioned at that point,
the issue is taken up a little further down:
https://www.postgresql.org/docs/current/static/ddl-schemas.html#DDL-SCHEMAS-PRIV
regards, tom lane
--
Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-docs
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: tgl@sss.pgh.pa.us, buck@dbrhino.com
Subject: Re: Document PUBLIC grants on PUBLIC schema
In-Reply-To: <12403.1507043533@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox