diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2013-06-09 15:26:55 -0400 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2013-06-09 15:26:55 -0400 |
| commit | aee8a60c7232cc048e00a704fca49730a722432a (patch) | |
| tree | cd8afdc844250663d33165e25caafbb821ab541e /doc/src | |
| parent | 8c3fdbb56e8ab404bbd4d919c2cc53ca4b031516 (diff) | |
| download | postgresql-aee8a60c7232cc048e00a704fca49730a722432a.tar.gz postgresql-aee8a60c7232cc048e00a704fca49730a722432a.zip | |
Remove ALTER DEFAULT PRIVILEGES' requirement of schema CREATE permissions.
Per discussion, this restriction isn't needed for any real security reason,
and it seems to confuse people more often than it helps them. It could
also result in some database states being unrestorable. So just drop it.
Back-patch to 9.0, where ALTER DEFAULT PRIVILEGES was introduced.
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/ref/alter_default_privileges.sgml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/src/sgml/ref/alter_default_privileges.sgml b/doc/src/sgml/ref/alter_default_privileges.sgml index f7b52ef9d1a..f67cfc7116d 100644 --- a/doc/src/sgml/ref/alter_default_privileges.sgml +++ b/doc/src/sgml/ref/alter_default_privileges.sgml @@ -111,8 +111,8 @@ REVOKE [ GRANT OPTION FOR ] <term><replaceable>schema_name</replaceable></term> <listitem> <para> - The name of an existing schema. Each <replaceable>target_role</> - must have <literal>CREATE</> privileges for each specified schema. + The name of an existing schema. If specified, the default privileges + are altered for objects later created in that schema. If <literal>IN SCHEMA</> is omitted, the global default privileges are altered. </para> |