Received: from localhost (unknown [200.46.208.211]) by mail.postgresql.org (Postfix) with ESMTP id 3E329633516 for ; Wed, 17 Jun 2009 13:25:34 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.208.211]) (amavisd-maia, port 10024) with ESMTP id 97725-07 for ; Wed, 17 Jun 2009 13:25:32 -0300 (ADT) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-bw0-f211.google.com (mail-bw0-f211.google.com [209.85.218.211]) by mail.postgresql.org (Postfix) with ESMTP id DDC1D62FBE6 for ; Wed, 17 Jun 2009 13:25:32 -0300 (ADT) Received: by bwz7 with SMTP id 7so500335bwz.19 for ; Wed, 17 Jun 2009 09:25:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=4heXfrS3gmmQiqIlO5vtrsjuC19eELqsoIIKfkVKcs8=; b=JcMSPgsNppt3aCL7KuSFcAicLHfNRJB2Ngsv66n4x5KXUvFCuC2MR7TcsLI1TlmRdf zS1gl0gNJS8JalNRaXd5dkiEAIXppwCjMvzo+5LDr/hZca4Z8FuRJwNWWskr9J4VGVLk PHhRkiEwPemveMnbxkPd5qyzz8OktmOQyXb3o= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=ETYt263OfN4b+ZxV1F8BiHyDjT87WgCnS6zy5CM6RuAKdEa5GJIGXE3YIK4Pb0cwtl IdHo9stYW67mkT6Zvv/UfGl8o4VXjaFx8athHbGVGSw/blwxhdbRnnr9YNQGVng05hBf 34nOnG3/uWYV70ILLugH2diA9uGOX2KQkKQ7I= MIME-Version: 1.0 Received: by 10.204.121.194 with SMTP id i2mr283214bkr.101.1245255931404; Wed, 17 Jun 2009 09:25:31 -0700 (PDT) In-Reply-To: <4A3904CC.1020105@pjmodos.net> References: <4A37BF63.50008@pjmodos.net> <200906171644.53717.peter_e@gmx.net> <25515.1245248104@sss.pgh.pa.us> <200906171744.24456.peter_e@gmx.net> <26370.1245250052@sss.pgh.pa.us> <4A3904CC.1020105@pjmodos.net> Date: Wed, 17 Jun 2009 18:25:31 +0200 Message-ID: <1d4e0c10906170925o5001f808j8e4e49b5c620c788@mail.gmail.com> Subject: Re: GRANT ON ALL IN schema From: Guillaume Smet To: Petr Jelinek Cc: Tom Lane , Peter Eisentraut , pgsql-hackers@postgresql.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.131 tagged_above=0 required=5 tests=AWL=0.131 X-Spam-Level: X-Archive-Number: 200906/1068 X-Sequence-Number: 140123 2009/6/17 Petr Jelinek : > I agree that Default ACLs are more important and I already offered Stephen > help on that. But I've seen countless requests for granting on all tables to > a user and I already got some positive feedback outside of the list, so I > believe there is demand for this. Also to paraphrase you Tom, by that logic > you can tell people to write half of administration functionality as plpgsql > functions. Indeed. How to do default ACLs and wildcards for GRANT is by far the most common question asked by our customers. And they don't understand why it's not by default in PostgreSQL. Installing a script/function for that on every database is just painful. -- Guillaume