Default Privileges¶
The privileges objects a role creates start with (ALTER DEFAULT PRIVILEGES FOR ROLE). Global and per-schema declarations compose, so they are kept as written.
Properties¶
| Property | Type | Required | Description |
|---|---|---|---|
name |
string |
yes | The role whose new objects the defaults apply to. |
grants |
array | — | Grants. |
revocations |
array | — | Privileges taken away from the built-in defaults, such as EXECUTE on functions from PUBLIC. REVOKE GRANT OPTION FOR is not supported, so a revocation cannot set with_grant_option to true. |
No other properties are accepted.
Source: schemata/default_privileges.yml · Resolved JSON Schema: default_privileges.json