postgres.git / summary / log / commit / refs

commit    0adff38da4bc88bcbcc07641ddc04180fe183188
Author:   Michael Paquier <michael@paquier.xyz>
Date:     Mon May 30 01:50:32 2022 +0000

    doc: Reword description of roles able to view track_activities's info
    
    The information generated when track_activities is accessible to
    superusers, roles with the privileges of pg_read_all_stats, as well as
    roles one has the privileges of.  The original text did not outline the
    last point, while the change done in ac1ae47 was unclear about the
    second point.
    
    Per discussion with Nathan Bossart.
    
    Discussion: https://postgr.es/m/20220521185743.GA886636@nathanxps13
    Backpatch-through: 10


 doc/src/sgml/config.sgml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index ff6deb68066..e83361b23fd 100644
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -7522,10 +7522,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv;
         executing command of each session, along with its identifier and the
         time when that command began execution. This parameter is on by
         default. Note that even when enabled, this information is not
-        visible to all users, only to superusers, members of the
-        <literal>pg_read_all_stats</literal> role and the user owning
-        the session being reported on, so it should not represent a
-        security risk.
+        visible to all users, only to superusers, roles with privileges of the
+        <literal>pg_read_all_stats</literal> role and the user owning the
+        sessions being reported on (including sessions belonging to a role they
+        have the privileges of), so it should not represent a security risk.
         Only superusers can change this setting.
        </para>
       </listitem>


[parent: f82595ac903e]