Message-ID: <39975699-715e-4587-91e2-f976e2fca6af@joeconway.com>
Date: Wed, 10 Dec 2025 13:13:11 -0500
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: database specific pg_read_all_data / pg_write_all_data
To: Tom Lane <tgl@sss.pgh.pa.us>,
 "David G. Johnston" <david.g.johnston@gmail.com>
Cc: richard coleman <rcoleman.ascentgl@gmail.com>,
 Laurenz Albe <laurenz.albe@cybertec.at>,
 Pgsql-admin <pgsql-admin@lists.postgresql.org>
References: 
 <CAGA3vBug6Sq_XYLxzmY470WFS6Z3OF28goYzX=QHrCc4hgQSDw@mail.gmail.com>
 <72acf8ae4e56886081b9f632569f290d3246c33b.camel@cybertec.at>
 <CAGA3vBuWjNdz=zfMNvpqYRJRdQCapbexWnD4kgOss2PMbw5ZZw@mail.gmail.com>
 <8536f893e79693bd0a23d4cea7dbe0b6366378df.camel@cybertec.at>
 <CAGA3vBtp2H4+v-AnWLq_w8TVAuHS5++6dHW98YN1-q7N66ywYQ@mail.gmail.com>
 <CAKFQuwZducmkxoyh_=gvdHJ2Te5rHGctv70BQQsacmgMMjtZRw@mail.gmail.com>
 <647281.1765388029@sss.pgh.pa.us>
Content-Language: en-US
From: Joe Conway <mail@joeconway.com>
In-Reply-To: <647281.1765388029@sss.pgh.pa.us>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/39975699-715e-4587-91e2-f976e2fca6af%40joeconway.com>
Precedence: bulk

On 12/10/25 12:33, Tom Lane wrote:
> "David G. Johnston" <david.g.johnston@gmail.com> writes:
>> Fundamentally making group-role memberships per-database is a fundamental
>> change that seems quite unappealing to attempt without a solid use case
>> that it will enable.
> 
> Yeah, I think this would be bad from both the intellectual-complexity
> and implementation-difficulty standpoints.
> 
> However ... we've had multiple requests in the past to invent
> database-specific roles.  I wonder if it'd suffice for Richard's
> purposes to create such roles and grant them pg_read_all_data.


There is a significant real world demand for doing multi-tenant 
PostgreSQL by having one tenant per database. It is not ideal by any 
means, but a substantial number of folks use that strategy whether we 
like it or not.

Anything we can do to make it less sketchy and painful would be useful 
indeed.

-- 
Joe Conway
PostgreSQL Contributors Team
Amazon Web Services: https://aws.amazon.com