@@ -139,15 +139,16 @@ GRANT <replaceable class="PARAMETER">role_name</replaceable> [, ...] TO <replace
139
139
</para>
140
140
141
141
<para>
142
- Depending on the type of object, the initial default privileges might
143
- include granting some privileges to <literal>PUBLIC</literal>.
144
- The default is no public access for tables, columns, schemas, and
145
- tablespaces;
146
- <literal>CONNECT</> privilege and <literal>TEMP</> table creation privilege
147
- for databases;
148
- <literal>EXECUTE</> privilege for functions; and
149
- <literal>USAGE</> privilege for languages.
150
- The object owner can of course revoke these privileges. (For maximum
142
+ PostgreSQL grants default privileges on some types of objects to
143
+ <literal>PUBLIC</literal>. No privileges are granted to
144
+ <literal>PUBLIC</literal> by default on tables,
145
+ columns, schemas or tablespaces. For other types, the default privileges
146
+ granted to <literal>PUBLIC</literal> are as follows:
147
+ <literal>CONNECT</literal> and <literal>CREATE TEMP TABLE</literal> for
148
+ databases; <literal>EXECUTE</literal> privilege for functions; and
149
+ <literal>USAGE</literal> privilege for languages.
150
+ The object owner can, of course, <command>REVOKE</command>
151
+ both default and expressly granted privileges. (For maximum
151
152
security, issue the <command>REVOKE</> in the same transaction that
152
153
creates the object; then there is no window in which another user
153
154
can use the object.)
0 commit comments