Skip to content

Commit

Permalink
No longer need to manually propagate grant select (#939)
Browse files Browse the repository at this point in the history
  • Loading branch information
jonels-msft committed Jun 3, 2020
1 parent 50ce132 commit 07237e1
Showing 1 changed file with 2 additions and 7 deletions.
9 changes: 2 additions & 7 deletions cloud/security.rst
Original file line number Diff line number Diff line change
Expand Up @@ -123,18 +123,13 @@ Citus Cloud also supports :ref:`rls` for greater control in a multi-tenant envir
Granting Privileges in Bulk
---------------------------

Citus propagates single-table GRANT statements through the entire cluster, making them apply on all worker nodes. However GRANTs that are system-wide (e.g. for all tables in a schema) need to be applied individually to every data node using a Citus helper function.
Citus propagates single-table GRANT statements through the entire cluster, making them apply on all worker nodes. It also propagates GRANTs that are system-wide (e.g. for all tables in a schema):

.. code-block:: postgresql
-- applies to the coordinator node
-- applies to the coordinator node and propagates to workers
GRANT SELECT ON ALL TABLES IN SCHEMA public TO reports;
-- make it apply to workers as well
SELECT run_command_on_workers(
'GRANT SELECT ON ALL TABLES IN SCHEMA public TO reports;'
);
.. _grant_usage:

Granting Access to Other Schemas
Expand Down

0 comments on commit 07237e1

Please sign in to comment.