From: Kevin Grittner <Kevin.Grittner@wicourts.gov>
To: dkeeney <dvkeeney@gmail.com>
To: pgsql-admin@postgresql.org
Subject: Re: privilege shedding
Date: Thu, 21 Aug 2008 09:10:16 -0500
Message-ID: <48AD30F8.EE98.0025.0@wicourts.gov> (raw)
In-Reply-To: <b6680ffd-0b5e-456d-9f8a-164acdc5260c@m44g2000hsc.googlegroups.com>
References: <b6680ffd-0b5e-456d-9f8a-164acdc5260c@m44g2000hsc.googlegroups.com>
>>> dkeeney <dvkeeney@gmail.com> wrote:
> Is there a way to non-reversibly shed privilige within a PostgreSQL
> session?
> I would like the role
> change to persist through the life of the session, without the
option
> of restoring the superuser role.
We could use this in certain circumstances. How about SET
AUTHORIZATION ROLE as syntax? (I was trying to find a reserved word
to use where LOCAL and SESSION are now allowed which would have the
right connotations. I'm entirely happy with this, but it doesn't seem
too bad....)
-Kevin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: Kevin.Grittner@wicourts.gov, dvkeeney@gmail.com
Subject: Re: privilege shedding
In-Reply-To: <48AD30F8.EE98.0025.0@wicourts.gov>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox