Re: Postgresql Developer Privileges

On 2012-07-27, John R Pierce <pierce@hogranch.com> wrote:
> On 07/27/12 12:30 PM, hartrc wrote:

> and make each developer a member of this role.
>
>> Developers do not own the objects themselves
>
> thats a little more tricky, as AFAIK only a 'superuser' can change the
> role that owns an object, by default its owned by the rule that created
> it, but a user who's a member of a group can SET ROLE group;  and then
> any objects they create belong to that group, or they can ALTER
> TABLE/VIEW/etc name OWNER TO newowner;  for any role they are a member of.
>

after doing

  grant developer to USERNAME;

you can do

  alter user USERNAME set role to developer;

then when USERNAME logs it will be as if they had done
"set role to developer;"

--
⚂⚃ 100% natural