diff --git a/doc/src/sgml/ref/grant.sgml b/doc/src/sgml/ref/grant.sgml index 9c9f08f4305..9f09458eb35 100644 --- a/doc/src/sgml/ref/grant.sgml +++ b/doc/src/sgml/ref/grant.sgml @@ -1,5 +1,5 @@ @@ -129,10 +129,15 @@ GRANT role [, ...] TO SELECT - Allows from any column of the - specified table, view, or sequence. Also allows the use of - TO. For sequences, this - privilege also allows the use of the currval function. + Allows from + any column of the specified table, view, or sequence. + Also allows the use of + TO. + This privilege is also needed to reference existing column values in + or + . + For sequences, this privilege also allows the use of the + currval function. @@ -141,8 +146,9 @@ GRANT role [, ...] TO INSERT - Allows of a new row into the - specified table. Also allows FROM. + Allows of a new + row into the specified table. + Also allows FROM. @@ -152,10 +158,15 @@ GRANT role [, ...] TO Allows of any - column of the specified table. SELECT ... FOR UPDATE + column of the specified table. + (In practice, any nontrivial UPDATE command will require + SELECT privilege as well, since it must reference table + columns to determine which rows to update, and/or to compute new + values for columns.) + SELECT ... FOR UPDATE and SELECT ... FOR SHARE - also require this privilege (besides the - SELECT privilege). For sequences, this + also require this privilege, in addition to the + SELECT privilege. For sequences, this privilege allows the use of the nextval and setval functions. @@ -166,8 +177,11 @@ GRANT role [, ...] TO DELETE - Allows of a row from the - specified table. + Allows of a row + from the specified table. + (In practice, any nontrivial DELETE command will require + SELECT privilege as well, since it must reference table + columns to determine which rows to delete.) @@ -228,7 +242,7 @@ GRANT role [, ...] TO TEMP - Allows temporary tables to be created while using the database. + Allows temporary tables to be created while using the specified database.