From: Tom Lane <tgl@sss.pgh.pa.us>
To: Marcelo Fernandes <marcefern7@gmail.com>
cc: Adrian Klaver <adrian.klaver@aklaver.com>,
        Dominique Devienne <ddevienne@gmail.com>,
        pgsql-general@lists.postgresql.org
Subject: Re: Why does TRUNCATE require a special privilege?
In-reply-to: <CAM2F1VMb3VyRXGMGC51mo+PLaB=vRZQD=7YGyOo-z=XXpX8MHg@mail.gmail.com>
References: <CAM2F1VNkovvL_56K_6OJiYU8toUdEG1Jk7ABRQ426Geh8LMB+g@mail.gmail.com> <CAFCRh-9HTzAU7ia--Uad2-KnZv=zXeFaG0iT2ut0KXGEZhsHuw@mail.gmail.com> <9d1c1ee2-7488-4efd-8451-5d5b3cabe7f2@aklaver.com> <CAM2F1VMb3VyRXGMGC51mo+PLaB=vRZQD=7YGyOo-z=XXpX8MHg@mail.gmail.com>
Comments: In-reply-to Marcelo Fernandes <marcefern7@gmail.com>
	message dated "Sat, 17 Jan 2026 10:15:18 +1300"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1725373.1768605280.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 16 Jan 2026 18:14:40 -0500
Message-ID: <1725374.1768605280@sss.pgh.pa.us>
Archived-At: <https://www.postgresql.org/message-id/1725374.1768605280%40sss.pgh.pa.us>
Precedence: bulk

Marcelo Fernandes <marcefern7@gmail.com> writes:
> But from a roles/privilege framework perspective, why would you want to =
give
> certain users the DELETE privilege whereas others you want to give them
> only the TRUNCATE privilege?
> Are we saying to a user that "You need a different level of privilege be=
cause
> you are about to cause a MVCC-unsafe operation?".

Personally I think that's a plenty good enough reason ;-).
The very different locking level is another good reason.
TRUNCATE will block all other activity on the table, while
DELETE doesn't.

However, looking at our git history, it appears that TRUNCATE was
originally only permitted to the table owner.  The separate permission
bit was added (years later) so that the owner could grant out the
ability to others, without doing anything as non-backwards-compatible
as reinterpreting what operations a DELETE grant allows.

			regards, tom lane