From: Andrew Gierth <andrew@tao11.riddles.org.uk>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: "David G. Johnston" <david.g.johnston@gmail.com>,
  "bossartn\@amazon.com" <bossartn@amazon.com>,
  "pgsql-bugs\@postgresql.org" <pgsql-bugs@postgresql.org>
Subject: Re: BUG #14242: Role with a setconfig "role" setting to a nonexistent
 role causes pg_upgrade to fail
In-Reply-To: <15762.1468279332@sss.pgh.pa.us> (Tom Lane's message of "Mon, 11
	Jul 2016 19:22:12 -0400")
Message-ID: <87k2gr3g60.fsf@news-spur.riddles.org.uk>
References: <20160711223641.1426.86096@wrigleys.postgresql.org>
	<14434.1468277346@sss.pgh.pa.us>
	<CAKFQuwakeJGHp+4qOZwGtMXV2B4ML69HRdcpx8F9XzKTc725qQ@mail.gmail.com>
	<87oa633gzm.fsf@news-spur.riddles.org.uk>
	<15762.1468279332@sss.pgh.pa.us>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (berkeley-unix)
Date: Tue, 12 Jul 2016 00:36:05 +0100
MIME-Version: 1.0
Content-Type: text/plain
Precedence: bulk
Sender: pgsql-bugs-owner@postgresql.org

>>>>> "Tom" == Tom Lane <tgl@sss.pgh.pa.us> writes:

 > Andrew Gierth <andrew@tao11.riddles.org.uk> writes:
 >> I don't think this is documented but it has obvious uses.

 Tom> Does it?

For ALTER ROLE, there's actually a question that comes up not all that
infrequently on irc: "how do I arrange things so that what user 'foo'
does, by default, ends up owned by group role 'bar'"

I'm pretty sure I have never actually suggested that anyone do it this
way (because I had no idea it worked until I tried it just now), but I
can see the use case.

 Tom> If the named role is the same as the actual role, then it's
 Tom> useless.  If they're different, it seems at best confusing.  In
 Tom> the context of ALTER DATABASE SET, it seems both confusing and
 Tom> possibly a security hazard.

It _appears_ to silently fail if the user logging in is not actually a
member of the specified role. I have not looked at the code.

-- 
Andrew (irc:RhodiumToad)


-- 
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs