DROP
an objectSELECT
, INSERT
, UPDATE
, DELETE
USAGE
, CREATE
id
: role IDdatabase
: database nameschema
: schema name (empty if object_type
is DATABASE)object_name
: object name (empty if object_type
is SCHEMA or DATABASE)object_type
: type of the objectOBJECT_NAME
: name of the object, whose ownership they want to changeROLE_NAME
: name of the role that will become the new owner of the specified objectoxla_internal.oxla_role_ns_grants
or oxla_internal.oxla_role_table_grants
GRANT
or REVOKE
operations can still be performed on object owner - they will result in creating or removing entries
in oxla_internal.oxla_role_..._grants
tables, which are independent of data stored in oxla_internal.oxla_object_owner
.
These grants do not matter anything as long as the user is the owner of a given resource,
but they will take effect when the owner is changed.
table1
and user1
role with USAGE
grant in public schema:
user1
will no longer be the owner of table1
, but will have SELECT
grant on that table.
user1
will still be able to SELECT
from table1
because of ownership, however REVOKE
does not change anything.
user1
will not have access to table1
, however the owner has been changed and grant has been revoked.