Message-ID: <51151BDA.2090101@gmail.com>
Date: Fri, 08 Feb 2013 07:38:02 -0800
From: Adrian Klaver <adrian.klaver@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux i686;
	rv:17.0) Gecko/20130107 Thunderbird/17.0.2
MIME-Version: 1.0
To: Andreas Kretschmer <andreas@a-kretschmer.de>
CC: "pgsql-general@postgresql.org" <pgsql-general@postgresql.org>
Subject: Re: Bug, Feature, or what else?
References: 
 <119745304.24731.1360333559327.JavaMail.open-xchange@ox.ims-firmen.de>
	<51151128.8040807@gmail.com>
	<1568445490.24920.1360335539088.JavaMail.open-xchange@ox.ims-firmen.de>
	<51151764.4090405@gmail.com>
	<609013460.25018.1360337038276.JavaMail.open-xchange@ox.ims-firmen.de>
In-Reply-To: 
 <609013460.25018.1360337038276.JavaMail.open-xchange@ox.ims-firmen.de>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Precedence: bulk
Sender: pgsql-general-owner@postgresql.org

On 02/08/2013 07:23 AM, Andreas Kretschmer wrote:
>
>
> Adrian Klaver <adrian.klaver@gmail.com> hat am 8. Februar 2013 um 16:19
> geschrieben:
>> On 02/08/2013 06:58 AM, Andreas Kretschmer wrote:
>>>
>>>>> How can i drop a user as SUPERUSER (!) with all privileges?
>>>>
>>>> I believe you will need to REVOKE ALL ON SCHEMA public FROM ak02.
>>>
>>>
>>> doesn't help:
>>>
>>> -bash-4.1$ psql -U postgres db115150
>>> psql (9.1.8)
>>> Type "help" for help.
>>>
>>> db115150=# begin;
>>> BEGIN
>>> db115150=# revoke all on schema public from ak02;
>>> REVOKE
>>> db115150=# drop user ak02;
>>> FEHLER:  kann Rolle »ak02« nicht löschen, weil andere Objekte davon abhängen
>>> DETAIL:  Privilegien für Schema public
>>> db115150=#
>>>
>>>
>>
>> So what does \dn+ public show?
>
> db115150=# \dn+ public
>                               List of schemas
>    Name  |  Owner   |      Access privileges      |      Description
> --------+----------+-----------------------------+------------------------
>   public | postgres | postgres=UC/postgres       +| standard public schema
>          |          | akretschmer01=U*C*/postgres+|
>          |          | ak02=UC/akretschmer01       |
> (1 row)
>
>

If I am following the Notes section correctly in:

http://www.postgresql.org/docs/9.1/interactive/sql-revoke.html

"If a superuser chooses to issue a GRANT or REVOKE command, the command 
is performed as though it were issued by the owner of the affected 
object. Since all privileges ultimately come from the object owner 
(possibly indirectly via chains of grant options), it is possible for a 
superuser to revoke all privileges, but this might require use of 
CASCADE as stated above."


Try:

revoke all on schema public from ak02 cascade;


-- 
Adrian Klaver
adrian.klaver@gmail.com


-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general