Message-ID: <51151128.8040807@gmail.com>
Date: Fri, 08 Feb 2013 06:52:24 -0800
From: Adrian Klaver <adrian.klaver@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux i686;
	rv:17.0) Gecko/20130107 Thunderbird/17.0.2
MIME-Version: 1.0
To: Andreas Kretschmer <andreas@a-kretschmer.de>
CC: "pgsql-general@postgresql.org" <pgsql-general@postgresql.org>
Subject: Re: Bug, Feature, or what else?
References: 
 <119745304.24731.1360333559327.JavaMail.open-xchange@ox.ims-firmen.de>
In-Reply-To: 
 <119745304.24731.1360333559327.JavaMail.open-xchange@ox.ims-firmen.de>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Precedence: bulk
Sender: pgsql-general-owner@postgresql.org

On 02/08/2013 06:25 AM, Andreas Kretschmer wrote:
> Hi,
>
> i have created a normal user (no superuser) akretschmer01 and another normal
> user ak02. All fine.
> The first user is the owner of the db.
>
>
> As user akretschmer01 i granted:
>
> -bash-4.1$ psql -U akretschmer01 db115150
> psql (9.1.8)
> Type "help" for help.
>
> db115150=> grant all on schema public to ak02;
> GRANT
> db115150=> commit;
>
> There are no tables or other objects createt as user ak02.
>
>
> Now i switched to user postgres (superuser):
>
>
> -bash-4.1$ psql -U postgres db115150
> psql (9.1.8)
> Type "help" for help.
>
> db115150=# drop user ak02
> db115150-# ;
> FEHLER:  kann Rolle »ak02« nicht löschen, weil andere Objekte davon abhängen
> DETAIL:  Privilegien für Schema public
>
> (role ak02 cannot be dropped because some objects depend on it, Detail:
> privileges for schema public)
>
> I can revoke all on database from user:
>
> db115150=# revoke all on database db115150 from ak02;
> REVOKE
> db115150=# drop user ak02;
> FEHLER:  kann Rolle »ak02« nicht löschen, weil andere Objekte davon abhängen
> DETAIL:  Privilegien für Schema public
>
>
> but still i can't drop the user.
>
>
> I can do that with 9.1.8 and 9.1.1 too, same problem.
>
>
> How can i drop a user as SUPERUSER (!) with all privileges?

I believe you will need to REVOKE ALL ON SCHEMA public FROM ak02.

REVOKE ALL ON DATABASE does not mean revoke all privileges for all 
objects in the database. It only applies to DATABASE privileges-CONNECT, 
CREATE, TEMP

>
>
>
> Regards, Andreas
>
>


-- 
Adrian Klaver
adrian.klaver@gmail.com


-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general