Re:Ask HN: How PostgreSQL source code is 3x shorter than MyS...
by redis_mlc on Saturday October 17, 2020 @08:10PM
(#24814544)
The reality is that I commonly see MySQL production applications use non-admin accounts, and have never seen that for Postgres. So there is a problem.
Can you see if there is a grant similar to MySQL's FILE for COPY FROM/TO in Postgres? The last time I checked in early 2019, there wasn't.
I find this statement amazingly weird. In my experience, MySQL's access grants are extremely impoverished compared to Postgres (even in 8). It doesn't have row level security either.
> The main issues with managing Postgres today are grant inheritance
roles + `INHERIT` (which has been available since at least 8.1, 15 years ago)
> I shouldn't have to update grants for non-admin or readonly users after adding new objects
You don't. There are default grants that apply on object creation within a schema: `ALTER DEFAULT PRIVILEGES`.