Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 612A564FF7E for ; Thu, 21 Aug 2008 11:10:54 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 92132-01 for ; Thu, 21 Aug 2008 11:10:32 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from gwmta.wicourts.gov (gwmta.wicourts.gov [165.219.244.99]) by postgresql.org (Postfix) with ESMTP id B8A4264FCE6 for ; Thu, 21 Aug 2008 11:10:37 -0300 (ADT) Received: from Courts-MTA by gwmta.wicourts.gov with Novell_GroupWise; Thu, 21 Aug 2008 09:10:35 -0500 Message-Id: <48AD30F8.EE98.0025.0@wicourts.gov> X-Mailer: Novell GroupWise Internet Agent 7.0.3 Date: Thu, 21 Aug 2008 09:10:16 -0500 From: "Kevin Grittner" To: "dkeeney" , Subject: Re: privilege shedding References: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200808/111 X-Sequence-Number: 29956 >>> dkeeney wrote: > Is there a way to non-reversibly shed privilige within a PostgreSQL > session? > I would like the role > change to persist through the life of the session, without the option > of restoring the superuser role. We could use this in certain circumstances. How about SET AUTHORIZATION ROLE as syntax? (I was trying to find a reserved word to use where LOCAL and SESSION are now allowed which would have the right connotations. I'm entirely happy with this, but it doesn't seem too bad....) -Kevin