From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
cc: Michael Paquier <michael@paquier.xyz>, exclusion@gmail.com,
        pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17062: Assert failed in RemoveRoleFromObjectPolicy() on DROP
 OWNED policy applied to duplicate role
In-reply-to: 
 <CAOuzzgo_-Vz7OfavbBZuf5uDCh986Q2wDOjWUtvs7YkTvdKKEw@mail.gmail.com>
References: <17062-11f471ae3199ca23@postgresql.org>
 <1066940.1623964553@sss.pgh.pa.us> <1067500.1623965562@sss.pgh.pa.us>
 <1068096.1623966678@sss.pgh.pa.us> <YMwUWpBb26FkNBqW@paquier.xyz>
 <1233107.1624040308@sss.pgh.pa.us>
 <CAOuzzgo_-Vz7OfavbBZuf5uDCh986Q2wDOjWUtvs7YkTvdKKEw@mail.gmail.com>
Comments: In-reply-to Stephen Frost <sfrost@snowman.net>
	message dated "Fri, 18 Jun 2021 14:26:25 -0400"
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-ID: <1233945.1624041420.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 18 Jun 2021 14:37:00 -0400
Message-ID: <1233946.1624041420@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/1233946.1624041420%40sss.pgh.pa.us>
Precedence: bulk

Stephen Frost <sfrost@snowman.net> writes:
> I haven=E2=80=99t had a chance to delve into this but as far as the ques=
tion above
> goes- short answer is yes, there was generally an idea that we don=E2=80=
=99t want
> policies just disappearing.  Also- we don=E2=80=99t allow a role to be d=
ropped when
> there are GRANT=E2=80=99d privileges, users have to go REVOKE any privil=
eges that
> reference the role.

But shouldn't DROP OWNED BY clean those out for you?  If you've got
the right to get rid of the role, ISTM that that should certainly
include the right to get rid of grants to it.

			regards, tom lane