MIME-Version: 1.0
From: richard coleman <rcoleman.ascentgl@gmail.com>
Date: Tue, 9 Dec 2025 16:13:11 -0500
Message-ID: 
 <CAGA3vBug6Sq_XYLxzmY470WFS6Z3OF28goYzX=QHrCc4hgQSDw@mail.gmail.com>
Subject: database specific pg_read_all_data / pg_write_all_data
To: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000ab6be506458b6189"
Archived-At: 
 <https://www.postgresql.org/message-id/CAGA3vBug6Sq_XYLxzmY470WFS6Z3OF28goYzX%3DQHrCc4hgQSDw%40mail.gmail.com>
Precedence: bulk

--000000000000ab6be506458b6189
Content-Type: text/plain; charset="UTF-8"

In PostgreSQL 16+ the built in roles such as pg_read_all_data
and pg_write_all_data are a welcome addition to permission setting in
PostgreSQL.

Unfortunately they appear to be server-wide roles.

Woud it be possible to have roles like these that are database specific?

If there are 100 databases on a server, it would be extremely helpful to be
able to do something like:

*grant *pg_read_all_data* on database *foo* to *user_role*;*

Otherwise these roles are unusable from a practical stand point on servers
with multiple unrelated databases.

Thanks for the help,
rik.

--000000000000ab6be506458b6189
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">In PostgreSQL 16+ the built in roles such as=C2=A0pg_read_=
all_data and=C2=A0pg_write_all_data are a welcome addition to permission se=
tting in PostgreSQL.<div><br></div><div>Unfortunately they appear to be ser=
ver-wide roles.</div><div><br></div><div>Woud it be possible to have roles =
like these that are database specific?</div><div><br></div><div>If there ar=
e 100 databases on a server, it would be extremely helpful to be able to do=
 something like:</div><div><br></div><div><b>grant </b>pg_read_all_data<b> =
on database </b>foo<b> to </b>user_role<b>;</b></div><div><br></div><div>Ot=
herwise these roles are unusable from a practical stand point on servers wi=
th multiple unrelated databases.</div><div><br></div><div>Thanks for the he=
lp,</div><div>rik.</div></div>

--000000000000ab6be506458b6189--