From: Tom Lane <tgl@sss.pgh.pa.us>
To: "Wetmore, Matthew (CTR)" <Matthew.Wetmore@express-scripts.com>
cc: Aksel Allas <allasaksel@gmail.com>,
        Laurenz Albe <laurenz.albe@cybertec.at>,
        pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18242: pg_dump with non-superuser from pg14 to pg15 fails on
 ALTER FUNCTION
In-reply-to: <7cc4e1af8ca34ec982c5d7bedb9d63c0@express-scripts.com>
References: <18242-89f57a188c7de6c8@postgresql.org>
 <9ad3c3781f8d89efab1917d1431226f4da79d443.camel@cybertec.at>
 <CABnLe_AtD_M66oYkzgzxTe2fyi7rUwLZb1oU7Ug1y5jv==SKTQ@mail.gmail.com>
 <2436651.1702393775@sss.pgh.pa.us>
 <7cc4e1af8ca34ec982c5d7bedb9d63c0@express-scripts.com>
Comments: In-reply-to "Wetmore,
 Matthew (CTR)" <Matthew.Wetmore@express-scripts.com>
	message dated "Tue, 12 Dec 2023 16:15:30 +0000"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <2448877.1702400148.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 12 Dec 2023 11:55:48 -0500
Message-ID: <2448878.1702400148@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/2448878.1702400148%40sss.pgh.pa.us>
Precedence: bulk

"Wetmore, Matthew (CTR)" <Matthew.Wetmore@express-scripts.com> writes:
> What about a whole new user type:
> An 'Admin' account that isn't a super user, but just has dump/ elevated =
permissions /customizable.

[ shrug... ]  Maybe, but there's a mighty lot of devils hiding in
the details.  Exactly what special privileges would this user type
need?  How would we convince ourselves (and more to the point,
convince the cloud providers) that such a set of privileges is
safe to give out?  Poking holes in the privilege model is usually
a good way to create security hazards.

BTW, please keep the list cc'd.

			regards, tom lane