Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tu7Xo-003p2T-Hg for pgadmin-hackers@arkaria.postgresql.org; Mon, 17 Mar 2025 10:18:04 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tu7Xn-00ABuq-6Q for pgadmin-hackers@arkaria.postgresql.org; Mon, 17 Mar 2025 10:18:03 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tu7Xm-00ABs6-Qq for pgadmin-hackers@lists.postgresql.org; Mon, 17 Mar 2025 10:18:02 +0000 Received: from mail-lf1-x135.google.com ([2a00:1450:4864:20::135]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1tu7Xk-003IwL-1y for pgadmin-hackers@postgresql.org; Mon, 17 Mar 2025 10:18:01 +0000 Received: by mail-lf1-x135.google.com with SMTP id 2adb3069b0e04-547bcef2f96so4704746e87.1 for ; Mon, 17 Mar 2025 03:18:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pgadmin.org; s=google; t=1742206679; x=1742811479; darn=postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=yJUBGS5+PKv7VFfnXmAbrpMf+vjY6vKMjxbRask6aRU=; b=SwBUT81kUjrrXVpxuPOrJkVLoOSivuXMv1weT8UsBRzLw4R3CAMSwQzjnGI4Syf6qC m5N1VrkdaslORpTxD+ThCV/66rxdd5BpWvU/SeW9Nc7/aq+EqC3pskbhdynm8y9ryHpR JyU1FLBMSytb1VzI6wNg4pJQkufL4dW3GKh+LvicjpnICuot6JPw44fMpVzkLdjj+knp EQ9W3s4Urzl6ZCr4UNZazzQupSDq8a5etnjtgFmDzeLnieCfRxghazIv87oFJzON9dQC YYCKh2qR811AuIomc01S/79dEIKUIOekBNOnuXfYJ7Zuch0AA8kwwPlPGaUMIKEKXDW1 VHJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742206679; x=1742811479; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=yJUBGS5+PKv7VFfnXmAbrpMf+vjY6vKMjxbRask6aRU=; b=oHsAcugBigPTN34gMzfUQFE6kcpq468nkUoLjwwscoshfL4MZdjh7gRO3Mc3JCJABu GoEOB/tvnEzaMdG5Xts1Dl69M/Ka5CIksx8tmrOGCUmeHIwbZE/PuL2nFTiW46UzYzcq 1P6yfmyqcHsh3EpzFJNUvRMklEjjIRCTkBHE1AsH1rLOtvnJyQuHJkpynMuVqCPcBrjr O0heOm03jM0OWBoq6ZrD7ZbFvg3VmJUQ4NvINg+gzuNV4UQCXd8YGlXb4WvQ3eLCYrI2 EJeHOsQB0FhTvyT7/zi9krCKbHyakwsQ4VvdpRe3Ji8AIwq0tzgEFUaiWfYVTD9Ox+2a M5zQ== X-Gm-Message-State: AOJu0YwZwbvGt5L0mw7xODjgi/IbMQEUcgQGo3OeXkSrsYHg84tXee+N bvq/2vNOTanrlmEySnBXTzAWfXnRO7H8ilcskaFCmQkYtQvGVSll2oCEv/tI9F8fRPGhgWNQA5r ZYZQj0t6H18JRq/GXZYbKdIrhIsQmgEiANY/Gz37Duad3kzNFQQ== X-Gm-Gg: ASbGnctjRcdEBZK5fNX9cJQUgYj3EHU2fpuUdhX6aH5ngj/vKubckEuVXaorIn2dFy9 GkMJe52KV6mV9H/uT8SNVmHRemEKBbcGUf+8AXdEEq2jDIkCL9Uy8v62C3wAFagDvbaBeDtp4nf dAsYI1MU8s3yh2+iP5wKIT8vC2cRkN//ZhF3naKVQ= X-Google-Smtp-Source: AGHT+IG0f6AOP1twfPOXn+bWPZ3Q46TVV5WQTgC2CT/7njUJopGHWepCXabTjU0e/CJYqCZ6vzL0NYFJdDGOBuCHVmI= X-Received: by 2002:a05:6512:10d6:b0:545:2a69:b1f4 with SMTP id 2adb3069b0e04-549c391cee5mr4069882e87.29.1742206678880; Mon, 17 Mar 2025 03:17:58 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Dave Page Date: Mon, 17 Mar 2025 10:17:47 +0000 X-Gm-Features: AQ5f1JoszQZjAkxH4gEtNybeDIT2QmTx50dmg1STZkhLjYKEer7LVZ3tX2Msp5w Message-ID: Subject: Re: Role based access control discussion To: Aditya Toshniwal Cc: pgadmin-hackers Content-Type: multipart/alternative; boundary="0000000000003871cb0630871ae6" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --0000000000003871cb0630871ae6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, 17 Mar 2025 at 10:11, Aditya Toshniwal < aditya.toshniwal@enterprisedb.com> wrote: > > > On Mon, Mar 17, 2025 at 3:39=E2=80=AFPM Dave Page wro= te: > >> Hi >> >> On Mon, 17 Mar 2025 at 09:39, Aditya Toshniwal < >> aditya.toshniwal@enterprisedb.com> wrote: >> >>> Hi Dave, >>> >>> On Mon, Mar 17, 2025 at 3:00=E2=80=AFPM Dave Page w= rote: >>> >>>> Hi >>>> >>>> On Mon, 17 Mar 2025 at 09:11, Aditya Toshniwal < >>>> aditya.toshniwal@enterprisedb.com> wrote: >>>> >>>>> Hi Dave, >>>>> >>>>> Essentially, the permissions can be based on the menus: >>>>> >>>>> Object Explorer >>>>> >>>>> 1. Manage Server Create/Edit/Remove. >>>>> 2. Create database object (user could still be able to create >>>>> using query tool) >>>>> >>>>> Definitely not the second one. We shouldn't do anything that is >>>> enforced in the database server - it's unlikely the two permissions sy= stems >>>> will remain in sync for more than a few minutes, and we shouldn't be >>>> duplicating server functionality anyway. >>>> >>> Yeah. So should I proceed with the implementation? >>> >> >> >> If that=E2=80=99s what Akshay wants you working on, then sure :-) >> > > I was waiting for confirmation if the pgAdmin team would accept it or not > :) > My concerns have been answered, so it's good with me. --=20 Dave Page pgAdmin: https://www.pgadmin.org PostgreSQL: https://www.postgresql.org pgEdge: https://www.pgedge.com --0000000000003871cb0630871ae6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Mon, 17 Mar = 2025 at 10:11, Aditya Toshniwal <aditya.toshniwal@enterprisedb.com> wrote:


On Mon, Mar 17, 2025 at 3:39=E2=80=AFPM Dave = Page <dpage@pgadm= in.org> wrote:
Hi
<= div dir=3D"auto">
On Mon, 17 Mar 2025 at 09:39, Aditya Tos= hniwal <aditya.toshniwal@enterprisedb.com> wrote:
Hi=C2=A0Dave,

On Mon, Mar 17, 2025 at 3:00=E2=80=AFPM Dave= Page <dpage@pgad= min.org> wrote:
Hi

On Mon, 17 Mar 2025 at 09:11, Aditya Toshniwal <aditya.toshniwal@= enterprisedb.com> wrote:
=
Hi Dave,

Essentially, the permissions can be based on the menus:

Object Explorer

  1. Manage Server Create/Edit/Remove.
  2. Create database object (user could still be = able to create using query tool)
<= div>Definitely not the second one. We shouldn't do anything that is enf= orced in the database server - it's unlikely the two permissions system= s will remain in sync for more than a few minutes, and we shouldn't be = duplicating server functionality anyway.=C2=A0
Yeah. So should I proceed with the implementation?


If that=E2=80=99s what Akshay wants you working on, then sur= e :-)=C2=A0

I was waiting for confirmation if the pgAdmin t= eam would accept it or not :)

=
My concerns have been answered, so it's good with me.
= =C2=A0
--
--0000000000003871cb0630871ae6--