@@ -139,15 +139,16 @@ GRANT <replaceable class="PARAMETER">role_name</replaceable> [, ...] TO <replace
139139 </para>
140140
141141 <para>
142- Depending on the type of object, the initial default privileges might
143- include granting some privileges to <literal>PUBLIC</literal>.
144- The default is no public access for tables, columns, schemas, and
145- tablespaces;
146- <literal>CONNECT</> privilege and <literal>TEMP</> table creation privilege
147- for databases;
148- <literal>EXECUTE</> privilege for functions; and
149- <literal>USAGE</> privilege for languages.
150- The object owner can of course revoke these privileges. (For maximum
142+ PostgreSQL grants default privileges on some types of objects to
143+ <literal>PUBLIC</literal>. No privileges are granted to
144+ <literal>PUBLIC</literal> by default on tables,
145+ columns, schemas or tablespaces. For other types, the default privileges
146+ granted to <literal>PUBLIC</literal> are as follows:
147+ <literal>CONNECT</literal> and <literal>CREATE TEMP TABLE</literal> for
148+ databases; <literal>EXECUTE</literal> privilege for functions; and
149+ <literal>USAGE</literal> privilege for languages.
150+ The object owner can, of course, <command>REVOKE</command>
151+ both default and expressly granted privileges. (For maximum
151152 security, issue the <command>REVOKE</> in the same transaction that
152153 creates the object; then there is no window in which another user
153154 can use the object.)