diff --git a/doc/src/sgml/ref/grant.sgml b/doc/src/sgml/ref/grant.sgml index 73f88e0..0e878ba 100644 --- a/doc/src/sgml/ref/grant.sgml +++ b/doc/src/sgml/ref/grant.sgml @@ -453,6 +453,22 @@ GRANT role_name [, ...] TO + Further, roles having the INHERIT attribute + that are assigned to other roles in a hierarchical fashion are + additive of permission in the fashion of the + database.schema.table.column + hierarchy. E.g. a user's login role can be assigned a role of + accountant which is in turn assigned a role of + employee. The user would have the permissions of an + accountant and, by virtue of the role hierarchy, also + all permissions granted to employees. Unlike the + fixed + database.schema.table.column + hierarchy the PostgreSQL user is free to fashion + roles into arbitrary hierarchical structures. + + + When a non-owner of an object attempts to GRANT privileges on the object, the command will fail outright if the user has no privileges whatsoever on the object. As long as some privilege is