2

I am unable to drop user as I am getting default privileges error.

postgres=# drop user xyz;
ERROR: role "xyz" cannot be dropped because some objects depend on it
DETAIL: owner of default privileges on new functions belonging to role xyz

then I checked default privileges in database,

 postgres=# \ddp
Default access privileges
Owner | Schema | Type     | Access privileges
---- -+------- +----------+-------
xyz   |        | function |

Could you please let me know how to revoke this default privileges?

Erwin Brandstetter
  • 175,982
  • 27
  • 439
  • 600
Adam Mulla
  • 143
  • 1
  • 11

2 Answers2

4

You have to grant the “default” default privileges:

ALTER DEFAULT PRIVILEGES FOR ROLE xyz GRANT EXECUTE ON FUNCTIONS TO PUBLIC;
ALTER DEFAULT PRIVILEGES FOR ROLE xyz GRANT EXECUTE ON FUNCTIONS TO xyz;

Then you should be able to drop the role.

Laurenz Albe
  • 51,298
  • 4
  • 39
  • 69
1

This is the safe sequence of commands to drop a role:

Run in every involved database of the DB cluster.

REASSIGN OWNED BY xyz TO postgres;
DROP OWNED BY xyz;

DROP OWNED also gets rid of all privileges and default privileges!

Finally:

DROP ROLE xyz;

More detailed explanation:

Erwin Brandstetter
  • 175,982
  • 27
  • 439
  • 600