Message-ID: <1507620895.4152.1.camel@cybertec.at>
Subject: Omission in GRANT documentation
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: pgsql-hackers@postgresql.org
Date: Tue, 10 Oct 2017 09:34:55 +0200
Organization: Cybertec
Content-Type: multipart/mixed; boundary="=-tqyg1GMCK5QYIz5xwtfx"
Mime-Version: 1.0
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org


--=-tqyg1GMCK5QYIz5xwtfx
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit

grant.sgml says that

   the default privileges granted to PUBLIC are as follows: CONNECT and
 
   CREATE TEMP TABLE for databases; EXECUTE privilege for functions;
   and USAGE privilege for languages.

But types also have the USAGE privilege for PUBLIC by default:

test=> CREATE TYPE bug_status AS ENUM ('new', 'open', 'closed');
CREATE TYPE
test=> GRANT USAGE ON TYPE bug_status TO duff;
GRANT
test=> REVOKE USAGE ON TYPE bug_status FROM duff;
REVOKE
test=> \dT+ bug_status
                         List of data types
 Schema |    Name    | ... |  Owner  | Access privileges | ...
--------+------------+-----+---------+-------------------+-----
 public | bug_status |     | laurenz | =U/laurenz       +| 
        |            |     |         | laurenz=U/laurenz | 
(1 row)

Hence I propose the attached documentation patch.

Yours,
Laurenz Albe
--=-tqyg1GMCK5QYIz5xwtfx
Content-Disposition: attachment;
	filename="0001-Fix-documentation-of-default-privileges-for-types.patch"
Content-Transfer-Encoding: base64
Content-Type: text/x-patch;
	name="0001-Fix-documentation-of-default-privileges-for-types.patch";
	charset="UTF-8"
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--=-tqyg1GMCK5QYIz5xwtfx
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

--=-tqyg1GMCK5QYIz5xwtfx--