Thread: default role privileges
On Mon, May 13, 2019 at 8:18 PM Michael Shapiro <mshapiro51@gmail.com> wrote:
default privileges can be applied to roles (and, it appears, only to roles)
You can find the default priviledges on the database, and schema properties dialog.
ALTER DEFAULT PRIVILEGES [ FOR { ROLE | USER }target_role[, ...] ] [ IN SCHEMAschema_name[, ...] ]abbreviated_grant_or_revokeOn Mon, May 13, 2019 at 4:58 AM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:On Mon, May 13, 2019 at 3:06 PM Michael Shapiro <mshapiro51@gmail.com> wrote:I ran this in one of my databasesALTER DEFAULT PRIVILEGES FOR ROLE some_role REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC:I can not see this default privilege anywhere in PgAdmin4 (nor in PgAdmin3).I see no default privileges for roles on the SQL for the role.Default privileges can be applied on tables, sequences, types and on functions only, so why roles?I do see default privileges on the SQL for the database itself, but not the one I added above.You can create this bug @ https://redmine.postgresql.org/projects/pgadmin4 with the proper steps to reproduce it.(Also, the last example on the help page show creating an EDB role, but the discussion below talks about a role called "alice")On Sun, May 12, 2019 at 11:56 PM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:On Sun, May 12, 2019 at 7:42 PM Michael Shapiro <mshapiro51@gmail.com> wrote:Where in PgAdmin4 can I see (and set) default privileges for a role?
Attachment
Ashesh,
Thanks. I found these dialogs via the Object tab. However, they still do not show the revoke execute on functions from public for the role.
I don't see any indication for for this.
ALTER DEFAULT PRIVILEGES FOR ROLE some_role REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC:
Where does that appear?
On Tue, May 14, 2019 at 12:43 AM Ashesh Vashi <ashesh.vashi@enterprisedb.com> wrote:
On Mon, May 13, 2019 at 8:18 PM Michael Shapiro <mshapiro51@gmail.com> wrote:default privileges can be applied to roles (and, it appears, only to roles)You can find the default priviledges on the database, and schema properties dialog.ALTER DEFAULT PRIVILEGES [ FOR { ROLE | USER }target_role[, ...] ] [ IN SCHEMAschema_name[, ...] ]abbreviated_grant_or_revokeOn Mon, May 13, 2019 at 4:58 AM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:On Mon, May 13, 2019 at 3:06 PM Michael Shapiro <mshapiro51@gmail.com> wrote:I ran this in one of my databasesALTER DEFAULT PRIVILEGES FOR ROLE some_role REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC:I can not see this default privilege anywhere in PgAdmin4 (nor in PgAdmin3).I see no default privileges for roles on the SQL for the role.Default privileges can be applied on tables, sequences, types and on functions only, so why roles?I do see default privileges on the SQL for the database itself, but not the one I added above.You can create this bug @ https://redmine.postgresql.org/projects/pgadmin4 with the proper steps to reproduce it.(Also, the last example on the help page show creating an EDB role, but the discussion below talks about a role called "alice")On Sun, May 12, 2019 at 11:56 PM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:On Sun, May 12, 2019 at 7:42 PM Michael Shapiro <mshapiro51@gmail.com> wrote:Where in PgAdmin4 can I see (and set) default privileges for a role?
Attachment
On Tue, 14 May 2019, 13:04 Michael Shapiro, <mshapiro51@gmail.com> wrote:
Ashesh,Thanks. I found these dialogs via the Object tab. However, they still do not show the revoke execute on functions from public for the role.I don't see any indication for for this.ALTER DEFAULT PRIVILEGES FOR ROLE some_role REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC:Where does that appear?
That's probably missing.
Please create a bug for the same.
-- Thanks, Ashesh
On Tue, May 14, 2019 at 12:43 AM Ashesh Vashi <ashesh.vashi@enterprisedb.com> wrote:On Mon, May 13, 2019 at 8:18 PM Michael Shapiro <mshapiro51@gmail.com> wrote:default privileges can be applied to roles (and, it appears, only to roles)You can find the default priviledges on the database, and schema properties dialog.ALTER DEFAULT PRIVILEGES [ FOR { ROLE | USER }target_role[, ...] ] [ IN SCHEMAschema_name[, ...] ]abbreviated_grant_or_revokeOn Mon, May 13, 2019 at 4:58 AM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:On Mon, May 13, 2019 at 3:06 PM Michael Shapiro <mshapiro51@gmail.com> wrote:I ran this in one of my databasesALTER DEFAULT PRIVILEGES FOR ROLE some_role REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC:I can not see this default privilege anywhere in PgAdmin4 (nor in PgAdmin3).I see no default privileges for roles on the SQL for the role.Default privileges can be applied on tables, sequences, types and on functions only, so why roles?I do see default privileges on the SQL for the database itself, but not the one I added above.You can create this bug @ https://redmine.postgresql.org/projects/pgadmin4 with the proper steps to reproduce it.(Also, the last example on the help page show creating an EDB role, but the discussion below talks about a role called "alice")On Sun, May 12, 2019 at 11:56 PM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:On Sun, May 12, 2019 at 7:42 PM Michael Shapiro <mshapiro51@gmail.com> wrote:Where in PgAdmin4 can I see (and set) default privileges for a role?
