I just want the system to remove the 102, since it is of no use.

I understood that.

As I said, I haven't thought about it in-depth, but keeping the permissions
with the numeric user is a bad idea.

It is only a bad idea if the same numerical user id is reused. If not, this is not really a problem. It is not beautiful, but it does not harm.


So it looks much simpler to fix the real issue by avoiding the userid to
be reused. The dandling permission cost is low.

Would this keep the old permissions on the objects?

Yes, but no user would take it, so that would not be a security issue.

Something like select relname from pg_class where relacl similar to '[0-9]+=' would be sufficient.

Yep. Not with this very regexpr (think of user "tp01"), but something like that could work, indeed.

--
Fabien COELHO _ http://www.cri.ensmp.fr/~coelho _ [EMAIL PROTECTED]
   CRI-ENSMP, 35, rue Saint-Honoré, 77305 Fontainebleau cedex, France
   phone: (+33|0) 1 64 69 {voice: 48 52, fax: 47 09, standard: 47 08}
       ________  All opinions expressed here are mine  _________
---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster

Reply via email to