<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.StileMessaggioDiPostaElettronica17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="IT" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Buon giorno<o:p></o:p></p>
<p class="MsoNormal">Ho ancora un po’ di confusione sui grant di Postrgesql…<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ho un gruppo admin – chiamiamolo mioadmin<o:p></o:p></p>
<p class="MsoNormal">Un gruppo editor – chiamiamolo mioeditor<o:p></o:p></p>
<p class="MsoNormal">Un gruppo readers – mioreaders<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ogni uno di questi gruppi ha almeno un utente (mioadmin molto pochi, mioeditor alcuni, mioreaders quasi tutti)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Con un utente appartenente a mioadmin creo uno schema, mioschema, e voglio che solo mioeditors possano modificarne i contenuti e che di default tutti i readers e naturalmente mioadmin possano leggere le tabelle via via create.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Quindi:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">CREATE SCHEMA mioschema AUTHORIZATION mioadmin;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">GRANT ALL ON SCHEMA mioschema TO mioadmin;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">GRANT ALL ON SCHEMA mioschema TO mioeditor;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">GRANT USAGE ON SCHEMA delfi TO mioreaders;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">ALTER DEFAULT PRIVILEGES IN SCHEMA
</span><span lang="EN-US">mioschema </span><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">GRANT SELECT ON TABLES TO
</span><span lang="EN-US">mioreaders</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">Giusto?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">Se ora da pgadmin come utente appartenente a mioeditor creo una tabella:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">CREATE TABLE
</span><span lang="EN-US">mioschema</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">.prova<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">(pippo bit(1))<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">WITH (OIDS=FALSE);<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">ALTER TABLE
</span><span lang="EN-US">mioschema</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">.prova OWNER TO utente_mioeditor;<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">Funziona, la tabella viene correttamente creata<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">Non mi dà però i permessi di lettura ai
</span>mioreaders e neppure a mioadmin..<o:p></o:p></p>
<p class="MsoNormal">Questo ultimo gruppo può solamente eliminare la tabella ma non leggerne il contenuto..<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">Dove sbaglio??<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:IT">Grazie</span><o:p></o:p></p>
</div>
AVVISO DI RISERVATEZZA Informazioni riservate possono essere contenute nel messaggio o nei suoi allegati. Se non siete i destinatari indicati nel messaggio, o responsabili per la sua consegna alla persona, o se avete ricevuto il messaggio per errore, siete
pregati di non trascriverlo, copiarlo o inviarlo ad alcuno. In tal caso vi invitiamo a cancellare il messaggio ed i suoi allegati. Grazie. CONFIDENTIALITY NOTICE Confidential information may be contained in this message or in its attachments. If you are not
the addressee indicated in this message, or responsible for message delivering to that person, or if you have received this message in error, you may not transcribe, copy or deliver this message to anyone. In that case, you should delete this message and its
attachments. Thank you.
</body>
</html>