Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u9mw3-006KbR-1b for pgsql-general@arkaria.postgresql.org; Tue, 29 Apr 2025 15:31:51 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1u9mw0-008Hc7-Uh for pgsql-general@arkaria.postgresql.org; Tue, 29 Apr 2025 15:31:50 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u9mw0-008Hbz-Kg for pgsql-general@lists.postgresql.org; Tue, 29 Apr 2025 15:31:49 +0000 Received: from sss.pgh.pa.us ([68.162.161.243]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1u9mvz-000CJ8-2D for pgsql-general@lists.postgresql.org; Tue, 29 Apr 2025 15:31:48 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 53TFVi8U1031765; Tue, 29 Apr 2025 11:31:44 -0400 From: Tom Lane To: Dominique Devienne cc: "David G. Johnston" , "pgsql-general@lists.postgresql.org" Subject: Re: DROP ROLE as SUPERUSER In-reply-to: References: <2705563.1740067550@sss.pgh.pa.us> <2765124.1740070338@sss.pgh.pa.us> <3072990.1740148436@sss.pgh.pa.us> <3073944.1740149062@sss.pgh.pa.us> Comments: In-reply-to Dominique Devienne message dated "Tue, 29 Apr 2025 16:50:40 +0200" MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-ID: <1031763.1745940704.1@sss.pgh.pa.us> Content-Transfer-Encoding: 8bit Date: Tue, 29 Apr 2025 11:31:44 -0400 Message-ID: <1031764.1745940704@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Dominique Devienne writes: > On Fri, Feb 21, 2025 at 3:44 PM Tom Lane wrote: >> DROP OWNED also removes relevant permission entries (which can be >> thought of as things owned by the role, if you hold your head at >> the right angle). See its man page. > Except when it doesn't... I'm doing the DROP OWNED, and I'm getting > several "WARNING: no privileges could be revoked for ..." for SCHEMAs > and ROUTINEs. (which BTW break my unit tests, which monitor outputs). [ shrug... ] With no details, it's impossible to comment on this. regards, tom lane