PUBLIC is a special group because it provides default permissions for all users and groups. The database engine always checks permissions assigned to PUBLIC first. A couple of examples help clarify how PUBLIC permissions apply.
Suppose in PCC that you assign the CREATE TABLE permission to PUBLIC. You then create a user named “myuser” whose permissions in PCC do not include individual rights to create a table. Myuser
can create a table because the database engine first checks default permissions in PUBLIC, and PUBLIC, in this case, grants rights to create a table.
Conversely, if a permission is not granted to PUBLIC, then the permission granted to the individual user or group applies. For example, suppose in PCC that you do
not assign the CREATE TABLE permission to PUBLIC. No user can create a table unless the permissions for the user, or the group to which the user belongs, allow creating a table.