diff options
| -rw-r--r-- | doc/src/sgml/ref/grant.sgml | 42 |
1 files changed, 28 insertions, 14 deletions
diff --git a/doc/src/sgml/ref/grant.sgml b/doc/src/sgml/ref/grant.sgml index 368725ac8b0..a093d2c35bd 100644 --- a/doc/src/sgml/ref/grant.sgml +++ b/doc/src/sgml/ref/grant.sgml @@ -1,5 +1,5 @@ <!-- -$PostgreSQL: pgsql/doc/src/sgml/ref/grant.sgml,v 1.44.4.1 2005/01/22 23:23:53 momjian Exp $ +$PostgreSQL: pgsql/doc/src/sgml/ref/grant.sgml,v 1.44.4.2 2008/05/28 00:46:05 tgl Exp $ PostgreSQL documentation --> @@ -109,10 +109,15 @@ GRANT { CREATE | ALL [ PRIVILEGES ] } <term>SELECT</term> <listitem> <para> - Allows <xref linkend="sql-select" endterm="sql-select-title"> from any column of the - specified table, view, or sequence. Also allows the use of - <xref linkend="sql-copy" endterm="sql-copy-title"> TO. For sequences, this - privilege also allows the use of the <function>currval</function> function. + Allows <xref linkend="sql-select" endterm="sql-select-title"> from + any column of the specified table, view, or sequence. + Also allows the use of + <xref linkend="sql-copy" endterm="sql-copy-title"> TO. + This privilege is also needed to reference existing column values in + <xref linkend="sql-update" endterm="sql-update-title"> or + <xref linkend="sql-delete" endterm="sql-delete-title">. + For sequences, this privilege also allows the use of the + <function>currval</function> function. </para> </listitem> </varlistentry> @@ -121,8 +126,9 @@ GRANT { CREATE | ALL [ PRIVILEGES ] } <term>INSERT</term> <listitem> <para> - Allows <xref linkend="sql-insert" endterm="sql-insert-title"> of a new row into the - specified table. Also allows <xref linkend="sql-copy" endterm="sql-copy-title"> FROM. + Allows <xref linkend="sql-insert" endterm="sql-insert-title"> of a new + row into the specified table. + Also allows <xref linkend="sql-copy" endterm="sql-copy-title"> FROM. </para> </listitem> </varlistentry> @@ -131,10 +137,15 @@ GRANT { CREATE | ALL [ PRIVILEGES ] } <term>UPDATE</term> <listitem> <para> - Allows <xref linkend="sql-update" endterm="sql-update-title"> of any column of the - specified table. <literal>SELECT ... FOR UPDATE</literal> - also requires this privilege (besides the - <literal>SELECT</literal> privilege). For sequences, this + Allows <xref linkend="sql-update" endterm="sql-update-title"> of any + column of the specified table. + (In practice, any nontrivial <command>UPDATE</> command will require + <literal>SELECT</> privilege as well, since it must reference table + columns to determine which rows to update, and/or to compute new + values for columns.) + <literal>SELECT ... FOR UPDATE</literal> + also requires this privilege, in addition to the + <literal>SELECT</literal> privilege. For sequences, this privilege allows the use of the <function>nextval</function> and <function>setval</function> functions. </para> @@ -145,8 +156,11 @@ GRANT { CREATE | ALL [ PRIVILEGES ] } <term>DELETE</term> <listitem> <para> - Allows <xref linkend="sql-delete" endterm="sql-delete-title"> of a row from the - specified table. + Allows <xref linkend="sql-delete" endterm="sql-delete-title"> of a row + from the specified table. + (In practice, any nontrivial <command>DELETE</> command will require + <literal>SELECT</> privilege as well, since it must reference table + columns to determine which rows to delete.) </para> </listitem> </varlistentry> @@ -207,7 +221,7 @@ GRANT { CREATE | ALL [ PRIVILEGES ] } <term>TEMP</term> <listitem> <para> - Allows temporary tables to be created while using the database. + Allows temporary tables to be created while using the specified database. </para> </listitem> </varlistentry> |