Postgres tech role for sequence only

Question

There is role sequence_owner. This is special tech role for working with sequence only.

create role sequence_owner;
GRANT sequence_owner TO administrator;
GRANT USAGE, SELECT, UPDATE  ON ALL SEQUENCES IN SCHEMA schema1 TO sequence_owner;

Also there are several users with role administrator: user1,...user42

GRANT administrator TO user1;
GRANT administrator TO user42;

Using user1 I can create sequence:

create sequence schema1.test_sequence;

but I can't change owner to special sequence_owner role

alter sequence schema1.test_sequence owner to sequence_owner;

There is error: ERROR: permission denied for schema schema1

I don't wont to use:

GRANT CREATE, USAGE ON SCHEMA schema1 to sequence_owner

Because in this case this role sequence_owner will have more priviligies than it must have.

yazabara · Accepted Answer · 2020-12-07 19:49:20Z

0

https://www.postgresql.org/docs/11/sql-altersequence.html

It's impossible: You must own the sequence to use ALTER SEQUENCE. To change a sequence's schema, you must also have CREATE privilege on the new schema. To alter the owner, you must also be a direct or indirect member of the new owning role, and that role must have CREATE privilege on the sequence's schema.

answered Dec 7, 2020 at 19:49

yazabara

1,3535 gold badges21 silver badges42 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Postgres tech role for sequence only

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related