From: Peter Eisentraut <peter_e@gmx.net>
Date: Mon, 6 Feb 2017 20:21:20 +0000 (-0500)
Subject: doc: Document sequence function privileges better
X-Git-Tag: REL_10_BETA1~937
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=696af9ab0a92642978169c227e187a65c2f35f17;p=postgresql

doc: Document sequence function privileges better

Document the privileges required for each of the sequence functions.
This was already in the GRANT reference page, but also add it to the
function description for easier reference.
---

diff --git a/doc/src/sgml/func.sgml b/doc/src/sgml/func.sgml
index b214218791..9e2170ea4b 100644
--- a/doc/src/sgml/func.sgml
+++ b/doc/src/sgml/func.sgml
@@ -11723,6 +11723,10 @@ nextval('foo'::text)      <lineannotation><literal>foo</literal> is looked up at
         </para>
        </important>
 
+       <para>
+        This function requires <literal>USAGE</literal>
+        or <literal>UPDATE</literal> privilege on the sequence.
+       </para>
       </listitem>
      </varlistentry>
 
@@ -11738,6 +11742,11 @@ nextval('foo'::text)      <lineannotation><literal>foo</literal> is looked up at
         other sessions have executed <function>nextval</function> since the
         current session did.
        </para>
+
+       <para>
+        This function requires <literal>USAGE</literal>
+        or <literal>SELECT</literal> privilege on the sequence.
+       </para>
       </listitem>
      </varlistentry>
 
@@ -11754,6 +11763,11 @@ nextval('foo'::text)      <lineannotation><literal>foo</literal> is looked up at
         <function>lastval</function> if <function>nextval</function>
         has not yet been called in the current session.
        </para>
+
+       <para>
+        This function requires <literal>USAGE</literal>
+        or <literal>SELECT</literal> privilege on the last used sequence.
+       </para>
       </listitem>
      </varlistentry>
 
@@ -11792,6 +11806,11 @@ SELECT setval('foo', 42, false);    <lineannotation>Next <function>nextval</> wi
          back.
         </para>
        </important>
+
+       <para>
+        This function requires <literal>UPDATE</literal> privilege on the
+        sequence.
+       </para>
       </listitem>
      </varlistentry>
     </variablelist>