On 2/28/16, John R Pierce <pie...@hogranch.com> wrote: > I don't see why anyone with delete privileges shouldn't be able to > truncate (after all, thats the same as deleting all records).
Firstly, because you can prevent deleting some rows by a trigger; TRUNCATE doesn't deal with rows. Secondary, TRUNCATE is _NOT_ MVCC. Even in a not yet finished transaction other connections can see empty table. Thirdly, TRUNCATE is often used for clearing most of (or even all) DB tables for tests. Splitting privileges is one of possible protection for running tests on a prod server (if config files are copied wrongly). > > -- > john r pierce, recycling bits in santa cruz -- Best regards, Vitaly Burovoy -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general
