We have observed that we need to grant create table permission at database level to user if they need to create objects however we just need to give them permissions at schema level as it's production environment and we cannot grant create table permission at database level.
1条答案
按热度按时间icomxhvb1#
Having CREATE TABLE permissions at the database level doesn't grant the user the ability to actually create a table. In addition they must have permissions on the target schema.
The correct grants for a user to be able to create tables in a schema is to grant the user or a role they are in ownership of the schema, eg
You don't just grant privileges on a schema owned by another user, or they could create objects with intact ownership chains to other schemas owned by the schema owner.