Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to content

Commit 7572630

Browse files
committed
Improve wording of documentation on default privileges.
Per recent -hackers discussion.
1 parent 4240e42 commit 7572630

File tree

1 file changed

+10
-9
lines changed

1 file changed

+10
-9
lines changed

doc/src/sgml/ref/grant.sgml

+10-9
Original file line numberDiff line numberDiff line change
@@ -139,15 +139,16 @@ GRANT <replaceable class="PARAMETER">role_name</replaceable> [, ...] TO <replace
139139
</para>
140140

141141
<para>
142-
Depending on the type of object, the initial default privileges might
143-
include granting some privileges to <literal>PUBLIC</literal>.
144-
The default is no public access for tables, columns, schemas, and
145-
tablespaces;
146-
<literal>CONNECT</> privilege and <literal>TEMP</> table creation privilege
147-
for databases;
148-
<literal>EXECUTE</> privilege for functions; and
149-
<literal>USAGE</> privilege for languages.
150-
The object owner can of course revoke these privileges. (For maximum
142+
PostgreSQL grants default privileges on some types of objects to
143+
<literal>PUBLIC</literal>. No privileges are granted to
144+
<literal>PUBLIC</literal> by default on tables,
145+
columns, schemas or tablespaces. For other types, the default privileges
146+
granted to <literal>PUBLIC</literal> are as follows:
147+
<literal>CONNECT</literal> and <literal>CREATE TEMP TABLE</literal> for
148+
databases; <literal>EXECUTE</literal> privilege for functions; and
149+
<literal>USAGE</literal> privilege for languages.
150+
The object owner can, of course, <command>REVOKE</command>
151+
both default and expressly granted privileges. (For maximum
151152
security, issue the <command>REVOKE</> in the same transaction that
152153
creates the object; then there is no window in which another user
153154
can use the object.)

0 commit comments

Comments
 (0)