Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kqK0y-0007Jz-9e for pgsql-admin@arkaria.postgresql.org; Fri, 18 Dec 2020 17:58:04 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kqK0x-0008Mr-9l for pgsql-admin@arkaria.postgresql.org; Fri, 18 Dec 2020 17:58:03 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kqJxl-0003ds-Vo for pgsql-admin@lists.postgresql.org; Fri, 18 Dec 2020 17:54:45 +0000 Received: from tamriel.snowman.net ([70.109.60.50]) by makus.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kqJxg-0000rN-Rd for pgsql-admin@lists.postgresql.org; Fri, 18 Dec 2020 17:54:44 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id 055BB5F7A2; Fri, 18 Dec 2020 12:54:39 -0500 (EST) Date: Fri, 18 Dec 2020 12:54:39 -0500 From: Stephen Frost To: Ron Cc: pgsql-admin@lists.postgresql.org Subject: Re: Grant request Message-ID: <20201218175439.GF16415@tamriel.snowman.net> References: <20201218162030.GD16415@tamriel.snowman.net> <760ec38b-a424-dfae-ac1f-ce0146771fd1@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="+Gz2OKLvufD1L+HP" Content-Disposition: inline In-Reply-To: <760ec38b-a424-dfae-ac1f-ce0146771fd1@gmail.com> User-Agent: Mutt/1.5.24 (2015-08-30) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --+Gz2OKLvufD1L+HP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Greetings, * Ron (ronljohnsonjr@gmail.com) wrote: > On 12/18/20 10:20 AM, Stephen Frost wrote: > >* Ron Watkins (rwatki@gmail.com) wrote: > >>I have a Azure production server, and a group of users is requesting se= lect > >>permissions for all tables, views, sequences, etc. > >>This is for all existing and all new objects in all schemas in the data= base. > >>I don't see any kind of "db_datareader" role. Suggestions? > >https://commitfest.postgresql.org/31/2702/ > > > >Hopefully will be included in PG14. Would be great to have folks who > >have this requirement take a look at and play with that patch and make > >sure that the role meets your requirements. >=20 > It's a darned shame this bug patch won't be applied to PG12. As it's not a bug it certainly wouldn't be appropriate to try and release as part of back-branches, not to mention that you'd have to hand-hack in the catalog changes to add such a role to an existing cluster anyway... So, no, it's not a bugfix and won't be added to existing releases. There isn't any guarantee it makes it into v14 either, to be clear, but having people review it, apply it, test it, play with it, and provide feedback would certainly help. Naturally, if there's other things in this vein (or any other, really) that folks would like, patches welcome. Thanks, Stephen --+Gz2OKLvufD1L+HP Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJf3OzfAAoJEO1sijiDR2RVf8UP/0U2k3l2Cc4gqeEBczVdJO2Z b2C5U0RVnwmDRse9klt6DlX9wmGBdzqLADEX8cOP0aiPbg/MaqemaUA//ZkMSbXs 8vQVHxY4/Bb1jWLmXlVLMZDHO7w2DxZgVmId5K0PtWJdtjv8dpfOR24vgVpQaHu+ ztDNJSuPH3Tw6cfidNXLIF4VYEoyCPOX6EX2fMUFeckowKODCJ+sVRINWnZejx0n Nu6ngr1YD+IoArcHi1O/CZYzvy4JKPcOsOyKacqk/f7JwSlHKBEyacRr1x3GsXWl ljKlMbLFsaRcWacnzaO22YGXFQy+kLoVBOyKB1t3w0K9c98OFL/FsX15g1ttDmKQ /+T+Aka9UwhHF8HeBc/NtIqMy3/nfGJ4I4z96uGrzMpguSPvB6YI9lYg7S5q9uLX XbWX2/qEfUwb15LlNKUuQC1P12myR8DrNZ4zQKDvJdYTP2q8Z2Wu2T7CV8oX6ayR um9EAv6V2ImplaKus6slgQ6W+ZtBHC8Ieyy7pqsIy1l8busjS6+JNWOd7rlUun7Q Hdqn28VS2OOBfUqF2OqBZE3r5Ze8VJtT92H49+PAtqn3OXnO8EkxyVbE9QK3RZpE p84pLR1+eKpFAtXb/4ShmDldpAkBf5KzZRUdkxD3eQsHkgp437UQ6k97IduOjA7R PD90aCnZURUzfbbbcSJV =/62z -----END PGP SIGNATURE----- --+Gz2OKLvufD1L+HP--