Postgres Privledge cheatsheet

pg-grant-cheatsheet.sql

REVOKE ALL ON SCHEMA public FROM PUBLIC;
GRANT ALL ON SCHEMA public TO postgres;
GRANT USAGE ON SCHEMA public TO <app_user>;
GRANT ALL ON SCHEMA public TO PUBLIC;


REVOKE ALL ON FUNCTION <function-name>(<signature>) FROM PUBLIC;
GRANT ALL ON FUNCTION <function-name>(<signature>) TO <app_user>;


GRANT ALL ON TABLE <table-name> TO postgres;
GRANT SELECT,INSERT,DELETE,UPDATE ON TABLE <table-name> TO <app_user>;
GRANT SELECT ON TABLE  <table-name> TO to_app_user;

REVOKE ALL(<column-name>) ON TABLE <table-name> FROM PUBLIC;
REVOKE ALL(<column-name>)  ON TABLE <table-name> FROM postgres;
GRANT UPDATE(<column-name>) ON TABLE <table-name> TO to_cma_user;