From: Andrew Gierth <andrew@tao11.riddles.org.uk>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: David G. Johnston <david.g.johnston@gmail.com>
Cc: bossartn\@amazon.com <bossartn@amazon.com>
Cc: pgsql-bugs\@postgresql.org <pgsql-bugs@postgresql.org>
Subject: Re: BUG #14242: Role with a setconfig "role" setting to a nonexistent role causes pg_upgrade to fail
Date: Tue, 12 Jul 2016 00:36:05 +0100
Message-ID: <87k2gr3g60.fsf@news-spur.riddles.org.uk> (raw)
In-Reply-To: <15762.1468279332@sss.pgh.pa.us>
References: <20160711223641.1426.86096@wrigleys.postgresql.org>
<14434.1468277346@sss.pgh.pa.us>
<CAKFQuwakeJGHp+4qOZwGtMXV2B4ML69HRdcpx8F9XzKTc725qQ@mail.gmail.com>
<87oa633gzm.fsf@news-spur.riddles.org.uk>
<15762.1468279332@sss.pgh.pa.us>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-bugs>
>>>>> "Tom" == Tom Lane <tgl@sss.pgh.pa.us> writes:
> Andrew Gierth <andrew@tao11.riddles.org.uk> writes:
>> I don't think this is documented but it has obvious uses.
Tom> Does it?
For ALTER ROLE, there's actually a question that comes up not all that
infrequently on irc: "how do I arrange things so that what user 'foo'
does, by default, ends up owned by group role 'bar'"
I'm pretty sure I have never actually suggested that anyone do it this
way (because I had no idea it worked until I tried it just now), but I
can see the use case.
Tom> If the named role is the same as the actual role, then it's
Tom> useless. If they're different, it seems at best confusing. In
Tom> the context of ALTER DATABASE SET, it seems both confusing and
Tom> possibly a security hazard.
It _appears_ to silently fail if the user logging in is not actually a
member of the specified role. I have not looked at the code.
--
Andrew (irc:RhodiumToad)
--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: andrew@tao11.riddles.org.uk, tgl@sss.pgh.pa.us, david.g.johnston@gmail.com, bossartn@amazon.com
Subject: Re: BUG #14242: Role with a setconfig "role" setting to a nonexistent role causes pg_upgrade to fail
In-Reply-To: <87k2gr3g60.fsf@news-spur.riddles.org.uk>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox