2006/12/13, Tom Lane <tgl@xxxxxxxxxxxxx>:
Martijn van Oosterhout <kleptog@xxxxxxxxx> writes:
> I don't beleive you have to explicitly grant access to the database, or
> the schema, but you definitly have to grant access to the tables
> directly.
They're completely separate privileges. GRANT ON DATABASE grants or
revokes permissions associated with database-level operations, not
permissions on specific objects contained in the database. Likewise
for GRANT ON SCHEMA.
What the OP seems to be wishing for is a wild-card grant operation,
viz
GRANT ALL ON TABLE *.* TO joeblow
which would indeed be a useful thing to have, but it's *not* GRANT ON
DATABASE.
Exactly.
Thank you Martijn and Tom for the help and clarification.
Cheers,
t.n.a.
