Re: forcing table ownership

On 16/09/11 14:13, Darin Perusich wrote:
>
> Altering the table owner by setting it to the group role effectively
> denies permission to all users of the group. Unless they explicitly "SET
> role grp1" that is.

I've already got a user "richardh"

As a superuser:
   CREATE GROUP mygroup INHERIT;
   GRANT mygroup TO richardh;
   CREATE TABLE shared_table (i int);
As richardh:
   ALTER TABLE shared_table ADD COLUMN t text;
   ERROR:  must be owner of relation shared_table
As superuser:
   ALTER TABLE shared_table OWNER TO mygroup;
As richardh:
   ALTER TABLE shared_table ADD COLUMN t text;
   ALTER TABLE

I think the key bit you're missing is the "INHERIT" on the group. Also
note that the CREATE USER/CREATE GROUP commands actually just run CREATE
ROLE under the hood.

--
   Richard Huxton
   Archonet Ltd