Re: Default Privilege Table ANY ROLE

2018-11-21 Thread Nicolas Paris
On Fri, Nov 16, 2018 at 03:17:59PM -0500, Tom Lane wrote: > Stephen Frost writes: > > There was much discussion of being able to have 'FOR ALL ROLES' or > > similar for ALTER DEFAULT PRIVILEGES when it went in, but there was a > > lot of concern about one user getting to define the default privile

Re: Default Privilege Table ANY ROLE

2018-11-16 Thread Tom Lane
Stephen Frost writes: > There was much discussion of being able to have 'FOR ALL ROLES' or > similar for ALTER DEFAULT PRIVILEGES when it went in, but there was a > lot of concern about one user getting to define the default privileges > for objects created by some other user. Yeah, it's hard to

Re: Default Privilege Table ANY ROLE

2018-11-16 Thread Stephen Frost
Greetings, * Tom Lane (t...@sss.pgh.pa.us) wrote: > Maybe I'm missing something, but doesn't this solve your problem > as stated? > > ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO public; That just means that the 'ROLE' in the result is the current role, as per the docs:

Re: Default Privilege Table ANY ROLE

2018-11-15 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 03:19:00PM +0100, Nicolas Paris wrote: > Hi > > I d'like my user be able to select on any new table from other users. > > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" GRANT > > select ON TABLES TO "myuser" > > ALTER DEFAULT PRIVILEGES FOR ROL

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 03:53:39PM -0500, Tom Lane wrote: > Maybe I'm missing something, but doesn't this solve your problem > as stated? > > ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO public; Not sure that's equivalent to what I am looking for below (but is not allowe

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Tom Lane
Maybe I'm missing something, but doesn't this solve your problem as stated? ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO public; regards, tom lane

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 09:04:44PM +0100, Laurenz Albe wrote: > Nicolas Paris wrote: > > I d'like my user be able to select on any new table from other users. > > > > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" > > > GRANT select ON TABLES TO "myuser" > > > ALTER DEFA

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Laurenz Albe
Nicolas Paris wrote: > I d'like my user be able to select on any new table from other users. > > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" GRANT > > select ON TABLES TO "myuser" > > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner2" IN SCHEMA "myschema" GRANT > > se

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Nicolas Paris
On Wed, Nov 14, 2018 at 10:05:51AM -0600, Ron wrote: > On 11/14/2018 08:19 AM, Nicolas Paris wrote: > > Hi > > > > I d'like my user be able to select on any new table from other users. > > > Would ROLE Groups solve your problem? Maybe yes, not sure what it is. I tested this: > create role myro

Re: Default Privilege Table ANY ROLE

2018-11-14 Thread Ron
On 11/14/2018 08:19 AM, Nicolas Paris wrote: Hi I d'like my user be able to select on any new table from other users. ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" GRANT select ON TABLES TO "myuser" ALTER DEFAULT PRIVILEGES FOR ROLE "theowner2" IN SCHEMA "myschema"

Default Privilege Table ANY ROLE

2018-11-14 Thread Nicolas Paris
Hi I d'like my user be able to select on any new table from other users. > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner1" IN SCHEMA "myschema" GRANT > select ON TABLES TO "myuser" > ALTER DEFAULT PRIVILEGES FOR ROLE "theowner2" IN SCHEMA "myschema" GRANT > select ON TABLES TO "myuser" >