Re: Trouble DROP'ing a ROLE, despite REVOKE'ing its privileges

2022-01-05 Thread Tom Lane
[ please keep the list cc'd ] Dominique Devienne writes: > On Wed, Jan 5, 2022 at 7:26 PM Tom Lane wrote: >> That will only revoke privileges that were granted by the role >> doing the REVOKE, so I surmise that you did this as some other role. > Hmmm, that's interesting... But it brings up some

Re: Trouble DROP'ing a ROLE, despite REVOKE'ing its privileges

2022-01-05 Thread Tom Lane
Dominique Devienne writes: > Final step is to DROP the "owner" ROLE itself, but before doing that, > I run REVOKE ALL ON DATABASE "ddevienne" FROM "owner". That will only revoke privileges that were granted by the role doing the REVOKE, so I surmise that you did this as some other role. But actua

Re: Trouble DROP'ing a ROLE, despite REVOKE'ing its privileges

2022-01-05 Thread Rob Sargent
> > Any help would be appreciated in diagnosing this vexing issue. Thanks, --DD Have you captured all the DDL generated by your C++ code?

Trouble DROP'ing a ROLE, despite REVOKE'ing its privileges

2022-01-05 Thread Dominique Devienne
At least I think I've revoked the privileges... Hi. I'm writing a unit test that creates a set of schemas and roles, then drops all those roles and schemas. First I create a NOINHERIT NOLOGIN CREATEROLE "owner" ROLE, which I GRANT on the current user (and other LOGIN users later), then SET ROLE "