I just want the system to remove the 102, since it is of no use.
I understood that.
As I said, I haven't thought about it in-depth, but keeping the permissions with the numeric user is a bad idea.
It is only a bad idea if the same numerical user id is reused. If not, this is not really a problem. It is not beautiful, but it does not harm.
So it looks much simpler to fix the real issue by avoiding the userid to be reused. The dandling permission cost is low.
Would this keep the old permissions on the objects?
Yes, but no user would take it, so that would not be a security issue.
Something like select relname from pg_class where relacl similar to '[0-9]+=' would be sufficient.
Yep. Not with this very regexpr (think of user "tp01"), but something like that could work, indeed.
-- Fabien COELHO _ http://www.cri.ensmp.fr/~coelho _ [EMAIL PROTECTED] CRI-ENSMP, 35, rue Saint-Honoré, 77305 Fontainebleau cedex, France phone: (+33|0) 1 64 69 {voice: 48 52, fax: 47 09, standard: 47 08} ________ All opinions expressed here are mine _________ ---------------------------(end of broadcast)--------------------------- TIP 4: Don't 'kill -9' the postmaster