pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedsome charts or graphs of possible permissions would be nice
4+ messages / 4 participants
[nested] [flat]
* some charts or graphs of possible permissions would be nice
@ 2020-06-09 21:34 PG Doc comments form <noreply@postgresql.org>
2020-06-10 06:45 ` Re: some charts or graphs of possible permissions would be nice Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 1 reply; 4+ messages in thread
From: PG Doc comments form @ 2020-06-09 21:34 UTC (permalink / raw)
To: pgsql-docs@lists.postgresql.org; +Cc: stephen@onethree.bio
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/11/sql-grant.html
Description:
Having read through the documentation on roles/granting I think I more or
less understand how it works, but what isn't really clarified is what the
overall universe of permissions that can be granted looks like. For example
I still didn't realize that to create a schema, you need to "GRANT CREATE"
to the role on the database before the role is allowed to do that. It's hard
to make a mental map of everything that a new role might need when I am
creating it.
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: some charts or graphs of possible permissions would be nice
2020-06-09 21:34 some charts or graphs of possible permissions would be nice PG Doc comments form <noreply@postgresql.org>
@ 2020-06-10 06:45 ` Laurenz Albe <laurenz.albe@cybertec.at>
2020-06-10 15:53 ` Re: some charts or graphs of possible permissions would be nice Alvaro Herrera <alvherre@2ndquadrant.com>
0 siblings, 1 reply; 4+ messages in thread
From: Laurenz Albe @ 2020-06-10 06:45 UTC (permalink / raw)
To: stephen@onethree.bio; pgsql-docs@lists.postgresql.org
On Tue, 2020-06-09 at 21:34 +0000, PG Doc comments form wrote:
> Having read through the documentation on roles/granting I think I more or
> less understand how it works, but what isn't really clarified is what the
> overall universe of permissions that can be granted looks like. For example
> I still didn't realize that to create a schema, you need to "GRANT CREATE"
> to the role on the database before the role is allowed to do that. It's hard
> to make a mental map of everything that a new role might need when I am
> creating it.
That would be material for a tutorial rather than a documentation.
Yours,
Laurenz Albe
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: some charts or graphs of possible permissions would be nice
2020-06-09 21:34 some charts or graphs of possible permissions would be nice PG Doc comments form <noreply@postgresql.org>
2020-06-10 06:45 ` Re: some charts or graphs of possible permissions would be nice Laurenz Albe <laurenz.albe@cybertec.at>
@ 2020-06-10 15:53 ` Alvaro Herrera <alvherre@2ndquadrant.com>
2020-06-11 08:19 ` Re: some charts or graphs of possible permissions would be nice Jürgen Purtz <juergen@purtz.de>
0 siblings, 1 reply; 4+ messages in thread
From: Alvaro Herrera @ 2020-06-10 15:53 UTC (permalink / raw)
To: Laurenz Albe <laurenz.albe@cybertec.at>; +Cc: stephen@onethree.bio; pgsql-docs@lists.postgresql.org
On 2020-Jun-10, Laurenz Albe wrote:
> On Tue, 2020-06-09 at 21:34 +0000, PG Doc comments form wrote:
> > Having read through the documentation on roles/granting I think I more or
> > less understand how it works, but what isn't really clarified is what the
> > overall universe of permissions that can be granted looks like. For example
> > I still didn't realize that to create a schema, you need to "GRANT CREATE"
> > to the role on the database before the role is allowed to do that. It's hard
> > to make a mental map of everything that a new role might need when I am
> > creating it.
>
> That would be material for a tutorial rather than a documentation.
... but our documentation *does* have a tutorial, which could perhaps
gain a section about privileges.
--
Álvaro Herrera https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: some charts or graphs of possible permissions would be nice
2020-06-09 21:34 some charts or graphs of possible permissions would be nice PG Doc comments form <noreply@postgresql.org>
2020-06-10 06:45 ` Re: some charts or graphs of possible permissions would be nice Laurenz Albe <laurenz.albe@cybertec.at>
2020-06-10 15:53 ` Re: some charts or graphs of possible permissions would be nice Alvaro Herrera <alvherre@2ndquadrant.com>
@ 2020-06-11 08:19 ` Jürgen Purtz <juergen@purtz.de>
0 siblings, 0 replies; 4+ messages in thread
From: Jürgen Purtz @ 2020-06-11 08:19 UTC (permalink / raw)
To: pgsql-docs@lists.postgresql.org; +Cc: stephen@onethree.bio
On 10.06.20 17:53, Alvaro Herrera wrote:
> On 2020-Jun-10, Laurenz Albe wrote:
>
>> On Tue, 2020-06-09 at 21:34 +0000, PG Doc comments form wrote:
>>> Having read through the documentation on roles/granting I think I more or
>>> less understand how it works, but what isn't really clarified is what the
>>> overall universe of permissions that can be granted looks like. For example
>>> I still didn't realize that to create a schema, you need to "GRANT CREATE"
>>> to the role on the database before the role is allowed to do that. It's hard
>>> to make a mental map of everything that a new role might need when I am
>>> creating it.
>> That would be material for a tutorial rather than a documentation.
> ... but our documentation *does* have a tutorial, which could perhaps
> gain a section about privileges.
>
What permissions issues do users typically struggle with? I personally
have seen no problems in this area. Stephen sends one example; can you
send more examples - or even a short text or a sketch of what you expect
to be in the documentation?
More general: Is it a real problem? My experience is that in most cases
permissions are handled at the application level, not at the database
level. Is it worth to give more details? I don't think so. But it may be
a good idea to follow Stephen's suggestion and put an introductory
summary to the tutorial chapter.
--
Jürgen Purtz
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2020-06-11 08:19 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-06-09 21:34 some charts or graphs of possible permissions would be nice PG Doc comments form <noreply@postgresql.org>
2020-06-10 06:45 ` Laurenz Albe <laurenz.albe@cybertec.at>
2020-06-10 15:53 ` Alvaro Herrera <alvherre@2ndquadrant.com>
2020-06-11 08:19 ` Jürgen Purtz <juergen@purtz.de>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox