Message-ID: <654b3102.170a0220.c794a.1f5b@mx.google.com>
Sender: Michael Banck <mbanck@gmail.com>
Date: Wed, 8 Nov 2023 07:56:02 +0100
From: Michael Banck <mbanck@gmx.net>
To: Bruce Momjian <bruce@momjian.us>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>,
	David Burns <david.burns@fedex.com>,
	pgsql-hackers@lists.postgresql.org
Subject: Re: Version 14/15 documentation Section "Alter Default Privileges"
References: <653cce08.050a0220.a10fb.7878@mx.google.com>
 <ZUUlmpxzsZMSZ7N_@momjian.us>
 <b227432f87266b680fd6f31e37b202b2fae5d9b6.camel@cybertec.at>
 <ZUaLgyKdfWeh6nlj@momjian.us>
 <244e0f9e3300f165ff578302e942fa3145dedfc7.camel@cybertec.at>
 <ZUbsWcPypVORlYCg@momjian.us>
 <ceac8e2df89a5eb1335ad8ce39c6ba0beaeddde3.camel@cybertec.at>
 <ZUkMi9UhnfHyIQMf@momjian.us>
 <06bdd234afabd3144ffaf8e95f42af0f3b38082e.camel@cybertec.at>
 <ZUq6fAsQZsyUAySx@momjian.us>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <ZUq6fAsQZsyUAySx@momjian.us>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: 
 <https://www.postgresql.org/message-id/654b3102.170a0220.c794a.1f5b%40mx.google.com>
Precedence: bulk

Hi,

On Tue, Nov 07, 2023 at 05:30:20PM -0500, Bruce Momjian wrote:
> On Mon, Nov  6, 2023 at 09:53:50PM +0100, Laurenz Albe wrote:
> > +  <para>
> > +   There is no way to change the default privileges for objects created by
> > +   arbitrary roles.  You have run <command>ALTER DEFAULT PRIVILEGES</command>
> 
> I find the above sentence odd.  What is its purpose?

I guess it is to address the main purpose of this patch/confusion with
users: they believe setting DEFAULT PRIVILEGES will set grants
accordingly for all objects created in the future, no matter who creates
them. So hammering in that this is not the case seems fine from my side
(modulo the "You have to run" typo).


Michael