Skip to content

Commit

Permalink
docs: Add docs to default privileges (#22380)
Browse files Browse the repository at this point in the history
  • Loading branch information
jkosh44 authored Oct 26, 2023
1 parent 35fbf61 commit bc94c69
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion doc/user/content/sql/alter-default-privileges.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,13 @@ themselves any privilege on an object that they own.

The `REVOKE` variant of `ALTER DEFAULT PRIVILEGES` is used to revoke previously created default
privileges on objects created in the future. It will not revoke any privileges on objects that have
already been created.
already been created. When revoking a default privilege, all the fields in the revoke statement
(`target_role`, `schema_name`, `database_name`, `privilege`, `grantee`) must exactly match an
existing default privilege. The existing default privileges can easily be viewed by the following
query: `SELECT * FROM mz_internal.mz_show_default_privileges`.

All new environments are created with a single default privilege, `USAGE` is granted on all `TYPES`
to the `PUBLIC` role. This can be revoked like any other default privilege.

## Syntax

Expand Down

0 comments on commit bc94c69

Please sign in to comment.