From: PG Bug reporting form <noreply@postgresql.org>
To: pgsql-bugs@lists.postgresql.org
Cc: harukat@sraoss.co.jp
Subject: BUG #18137: PG16 release note doc bug in "Allow GRANT group_name TO user_name ..."
Date: Thu, 28 Sep 2023 07:24:35 +0000
Message-ID: <18137-866ccb684317745f@postgresql.org> (raw)
The following bug has been logged on the website:
Bug reference: 18137
Logged by: TAKATSUKA Haruka
Email address: harukat@sraoss.co.jp
PostgreSQL version: 16.0
Operating system: any
Description:
In the following release note item, it seems that "GRANT group_name TO
user_name"
should be "ALTER GROUP group_name ADD USER user_name".
As far as I have tested and confirmed, ALTER GROUP is the one that
has been allowed since version 16.
test steps:
db1=# CREATE ROLE usr1 LOGIN;
db1=# CREATE ROLE usr2 LOGIN;
db1=# CREATE ROLE usr3 LOGIN;
db1=# CREATE ROLE grp1;
db1=# GRANT grp1 TO usr1 WITH ADMIN OPTION;
db1=# \c db1 usr1
db1=> ALTER GROUP grp1 ADD USER usr2;
15.x: ERROR: permission denied
16.0: GRANT successfully
db1=> GRANT grp1 TO usr3;
15.x: GRANT successfully
16.0: GRANT successfully
release note item (release-16.sgml 963) :
<!--
Author: Robert Haas <rhaas@postgresql.org>
2022-08-22 [ce6b672e4] Make role grant system more consistent with other
privil
-->
<listitem>
<para>
Allow <link linkend="sql-grant"><literal>GRANT group_name TO
user_name</literal></link> to be performed with <literal>ADMIN
OPTION</literal> (Robert Haas)
</para>
<para>
Previously <literal>CREATEROLE</literal> permission was required.
</para>
</listitem>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: noreply@postgresql.org, pgsql-bugs@lists.postgresql.org, harukat@sraoss.co.jp
Subject: Re: BUG #18137: PG16 release note doc bug in "Allow GRANT group_name TO user_name ..."
In-Reply-To: <18137-866ccb684317745f@postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox