postgres.git / summary / log / commit / refs

commit    a2ebf3274a43acf7ae36d608fc26090b803ab6e1
Author:   Tom Lane <tgl@sss.pgh.pa.us>
Date:     Fri Sep 20 19:56:34 2024 +0000
First released in: 18.0, 12.21, 13.17, 14.14, 15.9, 16.5, 17.0

    Doc: explain how to test ADMIN privilege with pg_has_role().
    
    This has always been possible, but the syntax is a bit obscure,
    and our user-facing docs were not very helpful.  Spell it out
    more clearly.
    
    Per complaint from Dominique Devienne.  Back-patch to
    all supported branches.
    
    Discussion: https://postgr.es/m/CAFCRh-8JNEy+dV4SXFOrWca50u+d=--TO4cq=+ac1oBtfJy4AA@mail.gmail.com


doc/src/sgml/func.sgml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/doc/src/sgml/func.sgml b/doc/src/sgml/func.sgml index 6f75bd0c7d2..e39d524b6bd 100644 --- a/doc/src/sgml/func.sgml +++ b/doc/src/sgml/func.sgml @@ -25289,6 +25289,10 @@ SELECT has_function_privilege('joeuser', 'myfunc(int, text)', 'execute'); are immediately available without doing <command>SET ROLE</command>, while <literal>SET</literal> denotes whether it is possible to change to the role using the <literal>SET ROLE</literal> command. + <literal>WITH ADMIN OPTION</literal> or <literal>WITH GRANT + OPTION</literal> can be added to any of these privilege types to + test whether the <literal>ADMIN</literal> privilege is held (all + six spellings test the same thing). This function does not allow the special case of setting <parameter>user</parameter> to <literal>public</literal>, because the PUBLIC pseudo-role can never be a member of real roles. [parent: c00c54a9ac1e]