From: Tom Lane <tgl@sss.pgh.pa.us>
To: Wetmore, Matthew (CTR) <Matthew.Wetmore@express-scripts.com>
Cc: Aksel Allas <allasaksel@gmail.com>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18242: pg_dump with non-superuser from pg14 to pg15 fails on ALTER FUNCTION
Date: Tue, 12 Dec 2023 11:55:48 -0500
Message-ID: <2448878.1702400148@sss.pgh.pa.us> (raw)
In-Reply-To: <7cc4e1af8ca34ec982c5d7bedb9d63c0@express-scripts.com>
References: <18242-89f57a188c7de6c8@postgresql.org>
<9ad3c3781f8d89efab1917d1431226f4da79d443.camel@cybertec.at>
<CABnLe_AtD_M66oYkzgzxTe2fyi7rUwLZb1oU7Ug1y5jv==SKTQ@mail.gmail.com>
<2436651.1702393775@sss.pgh.pa.us>
<7cc4e1af8ca34ec982c5d7bedb9d63c0@express-scripts.com>
"Wetmore, Matthew (CTR)" <Matthew.Wetmore@express-scripts.com> writes:
> What about a whole new user type:
> An 'Admin' account that isn't a super user, but just has dump/ elevated permissions /customizable.
[ shrug... ] Maybe, but there's a mighty lot of devils hiding in
the details. Exactly what special privileges would this user type
need? How would we convince ourselves (and more to the point,
convince the cloud providers) that such a set of privileges is
safe to give out? Poking holes in the privilege model is usually
a good way to create security hazards.
BTW, please keep the list cc'd.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: tgl@sss.pgh.pa.us, Matthew.Wetmore@express-scripts.com, allasaksel@gmail.com, laurenz.albe@cybertec.at, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18242: pg_dump with non-superuser from pg14 to pg15 fails on ALTER FUNCTION
In-Reply-To: <2448878.1702400148@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox