ERROR: permission denied for sequence cities_id_seq using Postgres

sql postgresql permissions auto-increment

I'm new at postgres (and at database info systems all in all). I ran following sql script on my database:

create table cities (
id serial primary key,
name text not null
);

create table reports (
id serial primary key,
cityid integer not null references cities(id),
reportdate date not null,
reporttext text not null
);

create user www with password 'www';

grant select on cities to www;
grant insert on cities to www;
grant delete on cities to www;

grant select on reports to www;
grant insert on reports to www;
grant delete on reports to www;

grant select on cities_id_seq to www;
grant insert on cities_id_seq to www;
grant delete on cities_id_seq to www;

grant select on reports_id_seq to www;
grant insert on reports_id_seq to www;
grant delete on reports_id_seq to www;

When, as the user www, trying to:

insert into cities (name) values ('London');

I get the following error:

ERROR: permission denied for sequence cities_id_seq

I get that the problem lies with the serial type. That's why I grant select, insert and delete rights for the *_id_seq to www. Yet this does not fix my problem. What am I missing?

Granting insert/delete on a sequence does not make sense to me. I'm surprised that it even works.

ThangLeQuoc

Since PostgreSQL 8.2 you have to use:

GRANT USAGE, SELECT ON SEQUENCE cities_id_seq TO www;

GRANT USAGE - For sequences, this privilege allows the use of the currval and nextval functions.

Also as pointed out by @epic_fil in the comments you can grant permissions to all the sequences in the schema with:

GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO www;

Note: Don't forget to choose the database (\c <database_name>) before executing the privilege grant commands

FYI, the syntax ". . . ON ALL SEQUENCES IN SCHEMA schema_name" is also supported.

Interesting. I did a GRANT all on the table that my sequence is in, but this doesn't seem to cover the sequence. This also seems to very by OS.

How is this a real thing? When would I ever want to allow a user to insert data into a table but NOT want to allow them to use the the fact that one of the columns is auto-incrementing?

IS SELECT necessary? Shouldn't USAGE cover what's needed?

@BrettWidmeier Exactly. It's stupefying to me how this sort of thing is tolerated by the developers. It's like people want to roam around the Internet and read bottomless StackOverflow threads in attempt to fix things that should have been working right out of the box.

Tom Gerken

Since @Phil has a comment getting a lot of upvotes which might not get noticed, I'm using his syntax to add an answer that will grant permissions to a user for all sequences in a schema (assuming your schema is the default 'public')

GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public to www;

Note that this only works in PostgreSQL 9.0 and up, to accomplish the same in 8 you could do something like: SELECT 'GRANT USAGE, SELECT ON ' || quote_ident(schemaname) || '.' || quote_ident(relname) || ' TO www;' FROM pg_statio_all_sequences WHERE schemaname = 'public'; – Tom Gerken 2 days ago

That version 8 workaround was a life saver. I initially struggled to work out how to use it. I had to use that query to produce a list of new queries, which I then had to issue. Is there a trick to do that in one hit? Also I inserted "SEQUENCES " after "ON "

Asfand Qazi

@Tom_Gerken, @epic_fil and @kupson are quite correct with their statements to give permissions to work with existing sequences. However, the user will NOT get access rights to sequences created in the future. To do that, you have to combine the GRANT statement with an ALTER DEFAULT PRIVILEGES statement, like so:

GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO www;
ALTER DEFAULT PRIVILEGES IN SCHEMA public
    GRANT USAGE, SELECT ON SEQUENCES TO www;

This only works on PostgreSQL 9+, of course.

This will append to existing default privileges, not overwrite them, so is quite safe in that regard.

Codemaker

It is due to permission issue on the SEQUENCES.

Try the following command to resolve the issue,

GRANT USAGE, SELECT ON SEQUENCE sequence_name TO user_name;

Eg:

GRANT USAGE, SELECT ON SEQUENCE cities_id_seq TO www;

Shreeram

Execute the following command in postgres.

sudo su postgres; psql dbname; CREATE SEQUENCE public.cities_id_seq INCREMENT 1 MINVALUE 0 MAXVALUE 1 START 1 CACHE 1; ALTER TABLE public.cities_id_seq OWNER TO pgowner;

pgowner will be your database user.

ERROR: permission denied for sequence cities_id_seq using Postgres

Follow WeChat

Want to stay one step ahead of the latest teleworks?

相似问题

Platform

Support

Contact US