Tom Lane wrote:
> After that, you get to the General Rules, which pretty clearly say
> that trying to grant privileges you don't have grant option for is
> just a warning and not an error condition. (Such privileges will not
> be in the set of "identified privilege descriptors".)
>
> AFAICS the specification for REVOKE is exactly parallel.
>
> So the existing code is still wrong, but not in quite the way we
> thought.
>
> I'd be the first to say that this aspect of the spec is a tad
> bizarre. Does anyone want to argue for ignoring the spec and
> implementing "saner" behavior? It's not like we are super close to
> spec compliance for privileges otherwise ...
My experience is that violating the spec in this area just leads to
other problems. Does anyone know what IBM and Oracle do here? AFAICT,
they're the ones writing the specs.