Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jiuUb-0004Ze-Ii for pgsql-docs@arkaria.postgresql.org; Wed, 10 Jun 2020 06:45:45 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1jiuUa-0003PR-D3 for pgsql-docs@arkaria.postgresql.org; Wed, 10 Jun 2020 06:45:44 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jiuUa-0003P4-7B for pgsql-docs@lists.postgresql.org; Wed, 10 Jun 2020 06:45:44 +0000 Received: from mail-wm1-x32a.google.com ([2a00:1450:4864:20::32a]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1jiuUX-0005Hr-Ri for pgsql-docs@lists.postgresql.org; Wed, 10 Jun 2020 06:45:43 +0000 Received: by mail-wm1-x32a.google.com with SMTP id q25so716885wmj.0 for ; Tue, 09 Jun 2020 23:45:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cybertec-at.20150623.gappssmtp.com; s=20150623; h=message-id:subject:from:to:date:in-reply-to:references:user-agent :mime-version:content-transfer-encoding; bh=X1sLg6WUyj1ctwue/kGRJz27T1Uc87CufbdYNq6bu74=; b=IRu4LfT58XDE0GiJRPj8HnZEFAZlLntFhvL8jeWT83EChQnWHVgIrZyzK+eSD/l5c7 RLlDBlAfLvI+PkMPaVWPsO3kU0v4R9TznElYQrC/msqWTnz1pNx4Xcis83rxTzKT3FKW zbQ+SjmmdQ3Bmh/TEa+lCz8ld5XZZUV5VVedk/1XH9+PGXouqbzKoS2Q3dA5/VHyteUi HaImhfGaPjY/HOcnoZj5YezysFE+NQmIvt/jBEKrfHPIXzZ0pVXjo0C0g6IjG/DPLQSc rAFPweljVf1lc9/IrMYYCh9dPkiBUfHfhFayQ+5zc+13SqKEt7rsUmNUc+bFqC+6t0UN 7ESg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:date:in-reply-to :references:user-agent:mime-version:content-transfer-encoding; bh=X1sLg6WUyj1ctwue/kGRJz27T1Uc87CufbdYNq6bu74=; b=aWaNowfd3+w5YFaGqmPFhiSji+WJrQ+gdfzufS4pPkw+oPJRJ94ux8TmrtZGBlYUOT 4T+Sx1QC3AE1E6tReK9KHMUCfTVvNA1mxoPtdU8oFbbFH6HBxYGDuMAVi3MxkPBDQw64 c7khdIEASIo1jmFmUTo1v6GxecrRIWzNuQQUrgjiNoIhQgCnC0CIymL0nLXdqo2iV7f0 BYVqV6V8txGkNjSXhADegKAWvHIrxF3LEynv5p0SGtQph7z+isSYvIgN71PNy54Vg4fv jlhKv6JWCA/f344ypdOOkknVJnp6XvAXoXmDm9NgQFW0XAzhlfD3nZOjADsr36PXhkC9 DV7A== X-Gm-Message-State: AOAM530a/7MmdLHc0xorazvJQV3cJwNb7qNACRVrh3x9eaUyYV8IZfM0 vVRWPq7NlvnfV1PQuABhXTRhmN5FIEw= X-Google-Smtp-Source: ABdhPJwlf/qk0ud2KSRhtavMksm/Zlf1FGtCxyumYoiePymjZhem5pfPHs/4mvfHgSJ4AoIejh9ZKg== X-Received: by 2002:a7b:cd06:: with SMTP id f6mr1619895wmj.8.1591771539955; Tue, 09 Jun 2020 23:45:39 -0700 (PDT) Received: from localhost.localdomain (217-149-168-87.nat.highway.telekom.at. [217.149.168.87]) by smtp.gmail.com with ESMTPSA id s8sm6917010wrg.50.2020.06.09.23.45.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 09 Jun 2020 23:45:39 -0700 (PDT) Message-ID: Subject: Re: some charts or graphs of possible permissions would be nice From: Laurenz Albe To: stephen@onethree.bio, pgsql-docs@lists.postgresql.org Date: Wed, 10 Jun 2020 08:45:38 +0200 In-Reply-To: <159173845767.660.13122155151121100888@wrigleys.postgresql.org> References: <159173845767.660.13122155151121100888@wrigleys.postgresql.org> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.32.5 (3.32.5-1.fc30) MIME-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On Tue, 2020-06-09 at 21:34 +0000, PG Doc comments form wrote: > Having read through the documentation on roles/granting I think I more or > less understand how it works, but what isn't really clarified is what the > overall universe of permissions that can be granted looks like. For example > I still didn't realize that to create a schema, you need to "GRANT CREATE" > to the role on the database before the role is allowed to do that. It's hard > to make a mental map of everything that a new role might need when I am > creating it. That would be material for a tutorial rather than a documentation. Yours, Laurenz Albe