grant not working on pg_class

[Gregory Stone]

I've got a problem where any group or user permissions to the pg_class
table aren't being registered by either psql or the JDBC driver. I issue
the following command:

GRANT ALL ON TABLE pg_class TO GROUP apps;
-OR-
GRANT ALL ON TABLE pg_class TO sculptor;

Both apps and sculptor are valid user and group names respectively. The
command executes fine and the following query produces:
paella=> SELECT relname, relacl FROM pg_class WHERE relname='pg_cla ss';
relname | relacl

----------+----------------------------------------------------------------------------------------------
pg_class | {=r/postgres,"group apps=arwdRxt/postgres","grou p
dev=w/postgres",sculp tor=arwdRxt/postgres}
(1 row)

Looks good right? The permissions are there as requested. But when I try
to execute a stored procedure that, with the command below, turns off the
triggers temporarily I get ERROR: permission denied for relation
pg_class.
UPDATE "pg_class" SET "reltrigger s" = 0 WHERE "relname" =
''layer_templat e'';
I'm using postgresql 7.4, on Mac OSX, and the JDBC driver that came witht
he source dist for darwin. I've checked the groups and it seems there was
a problem back in 6.4 or so but it was allegedly fixed. Any ideas?

Thanks,

Gregory
=====
--
~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~
Gregory Stone | "Suppose you were an idiot, and suppose you were
gu***@yahoo.com | a member of congress; but I repeat myself."
| - Mark Twain
~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~

_______________ _______________ ____
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
joining column's datatypes do not match

[Peter Eisentraut]

Gregory Stone writes:

to execute a stored procedure that, with the command below, turns off the
triggers temporarily I get ERROR: permission denied for relation
pg_class.

UPDATE "pg_class" SET "reltrigger s" = 0 WHERE "relname" =
''layer_templat e'';

There is a special restriction that prevents you from writing to system
catalogs. The user must have usecatupd set to true in pg_shadow. That is
generally only recommendable for superusers. (Else, anyone having write
access to pg_class could easily obtain write access to any other table.)

--
Peter Eisentraut pe*****@gmx.net
---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/docs/faqs/FAQ.html