Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jj32Z-0005zG-FH for pgsql-docs@arkaria.postgresql.org; Wed, 10 Jun 2020 15:53:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1jj32Y-0006QK-1y for pgsql-docs@arkaria.postgresql.org; Wed, 10 Jun 2020 15:53:22 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jj32X-0006QD-MX for pgsql-docs@lists.postgresql.org; Wed, 10 Jun 2020 15:53:21 +0000 Received: from mail-qt1-x841.google.com ([2607:f8b0:4864:20::841]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1jj32Q-0001mh-2a for pgsql-docs@lists.postgresql.org; Wed, 10 Jun 2020 15:53:21 +0000 Received: by mail-qt1-x841.google.com with SMTP id g18so2086584qtu.13 for ; Wed, 10 Jun 2020 08:53:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=2ndquadrant-com.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:mime-version:content-disposition :content-transfer-encoding:in-reply-to:user-agent; bh=2NGyBJDXxgDlq7/8fYbvL7KiA41cq1UK1D2IVa9WFb4=; b=vtwNYhwTEMyAGCS5wqzccaoAphgHzrs1j3SNq4Coej60SjQ2kj7mssUAQedyW8FkEV CO321l66xrvRLDGRBp3ruegnDUc8JMydX9N0+G8L5nUpyADmX/+FppQHII7kFmprT0YZ 52EvFMijUb/+aKFrxN4+BN4nPrNOwyUSy0nzqa6AWfBOTMah4PSqOrLcni/yXvWi4g/a Jamjt1rSOX8Hzg0e9qZ9p1RZLJYZPb7dLsJ8texFmOTwzeYrbUqyaO7UAEB9XH8/iuLQ 581CmHkYSOqmgB6Y6A6H3Dx1qnUQ1ziThtOxWJ8j8orzfp0DsRY4zGgRT+mygw5bkxKs k0VQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=2NGyBJDXxgDlq7/8fYbvL7KiA41cq1UK1D2IVa9WFb4=; b=GVgRHKzsOmQv5oEatB/r0lMkJrpjId8/bCbtuDDzJLwMrb3pIbQcz7Eh8sQtVmMR4L QioXPB0ZjBWSFZW2xLaRK1wYApcPY9O6+8hKY7aOr++vdKHax3vgQ3g+o9v7PdNfUTqL dtui89pr/tObAp6OicaZ9t34ICcaCJf5DUed3pfrzXIvPXCu0wuJ/RNg9XbdqUd7+o6d 9DDYaGdHOjDh7CoVws+41VWBQu9H2rumM0vXSvfTT8g07mfjJM/TdltiC3yf0POr+BW8 p3FsSsZm6pgS8TKrtvE8NXDNVO5JrCKVsTfbP8aUXE8zvpZowiI4Ei0TlAArZBf0aYyu RuVQ== X-Gm-Message-State: AOAM533Vmid3EVwZuBnECneVf6S010/zmzmAB2VJ48A8jcM3oJmfk8EN Tfm84s9gcSlb0+nV4nt+f6/4sPy9AGs= X-Google-Smtp-Source: ABdhPJznPWpCRwLzvpXM32RxnvW4CSwAzIHe8ztvjvSvTuGIioPq0BegfbLyb+SHYR1azeSapSU2oQ== X-Received: by 2002:ac8:1a45:: with SMTP id q5mr3805711qtk.180.1591804392099; Wed, 10 Jun 2020 08:53:12 -0700 (PDT) Received: from nimloth.alvh.no-ip.org ([190.95.18.252]) by smtp.gmail.com with ESMTPSA id u7sm32589qku.119.2020.06.10.08.53.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2020 08:53:11 -0700 (PDT) Received: by nimloth.alvh.no-ip.org (Postfix, from userid 1000) id C692A3006E5; Wed, 10 Jun 2020 11:53:09 -0400 (-04) Date: Wed, 10 Jun 2020 11:53:09 -0400 From: Alvaro Herrera To: Laurenz Albe Cc: stephen@onethree.bio, pgsql-docs@lists.postgresql.org Subject: Re: some charts or graphs of possible permissions would be nice Message-ID: <20200610155309.GA13342@alvherre.pgsql> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 2020-Jun-10, Laurenz Albe wrote: > On Tue, 2020-06-09 at 21:34 +0000, PG Doc comments form wrote: > > Having read through the documentation on roles/granting I think I more or > > less understand how it works, but what isn't really clarified is what the > > overall universe of permissions that can be granted looks like. For example > > I still didn't realize that to create a schema, you need to "GRANT CREATE" > > to the role on the database before the role is allowed to do that. It's hard > > to make a mental map of everything that a new role might need when I am > > creating it. > > That would be material for a tutorial rather than a documentation. ... but our documentation *does* have a tutorial, which could perhaps gain a section about privileges. -- Álvaro Herrera https://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services