agora inbox for [email protected]
help / color / mirror / Atom feedFrom: Adrian Klaver <[email protected]>
To: Tom Lane <[email protected]>
Cc: Andreas Kretschmer <[email protected]>
Cc: [email protected] <[email protected]>
Subject: Re: Bug, Feature, or what else?
Date: Fri, 08 Feb 2013 08:39:04 -0800
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <119745304.24731.1360333559327.JavaMail.open-xchange@ox.ims-firmen.de>
<[email protected]>
<1568445490.24920.1360335539088.JavaMail.open-xchange@ox.ims-firmen.de>
<[email protected]>
<609013460.25018.1360337038276.JavaMail.open-xchange@ox.ims-firmen.de>
<[email protected]>
List-Unsubscribe: <mailto:[email protected]?body=unsub%20pgsql-general>
On 02/08/2013 08:14 AM, Tom Lane wrote:
> Andreas Kretschmer <[email protected]> writes:
>> Adrian Klaver <[email protected]> hat am 8. Februar 2013 um 16:19
>>> So what does \dn+ public show?
>
>> db115150=# \dn+ public
>> List of schemas
>> Name | Owner | Access privileges | Description
>> --------+----------+-----------------------------+------------------------
>> public | postgres | postgres=UC/postgres +| standard public schema
>> | | akretschmer01=U*C*/postgres+|
>> | | ak02=UC/akretschmer01 |
>> (1 row)
>
> Ah: this shows that you didn't tell us the whole truth to start with.
> What you've actually got here is that postgres granted ALL WITH GRANT
> OPTION to akretschmer01, and then akretschmer01 used the grant option
> to grant rights to ak02. (I was wondering how it was that a non
> superuser would be able to grant anything about schema public...)
>
> Only akretschmer01 can directly drop the grant to ak02. What postgres
> could do is revoke the grant option to akretschmer01, and the cascaded
> effect of that would remove the privileges for ak02.
>
> Of course, postgres has other options besides that, of which "DROP OWNED
> BY ak02" is probably the most appropriate here. Or if you really want
> to get rid of just that grant, SET ROLE TO akretschmer01 and revoke.
The DROP OWNED was tried further up the thread and did not seem to work:
"
nice idea, but unfortunately no:
db115150=# drop owned by ak02;
DROP OWNED
db115150=# drop user ak02;
FEHLER: kann Rolle »ak02« nicht löschen, weil andere Objekte davon abhängen
DETAIL: Privilegien für Schema public
"
>
> regards, tom lane
>
>
--
Adrian Klaver
[email protected]
--
Sent via pgsql-general mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general
view thread (23+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected]
Subject: Re: Bug, Feature, or what else?
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox