pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedroles that have the CREATEROLE privilege can no longer GRANT predefined roles
3+ messages / 3 participants
[nested] [flat]
* roles that have the CREATEROLE privilege can no longer GRANT predefined roles
@ 2024-05-01 16:09 PG Doc comments form <noreply@postgresql.org>
2024-05-02 10:36 ` Re: roles that have the CREATEROLE privilege can no longer GRANT predefined roles Laurenz Albe <laurenz.albe@cybertec.at>
0 siblings, 1 reply; 3+ messages in thread
From: PG Doc comments form @ 2024-05-01 16:09 UTC (permalink / raw)
To: pgsql-docs@lists.postgresql.org; +Cc: shamilsadique@gmail.com
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/16/predefined-roles.html
Description:
roles that have the CREATEROLE privilege can no longer GRANT predefined
roles unless they are part of it having the WITH ADMIN option. this needs to
be corrected in the documentation
https://www.postgresql.org/docs/current/predefined-roles.html
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: roles that have the CREATEROLE privilege can no longer GRANT predefined roles
2024-05-01 16:09 roles that have the CREATEROLE privilege can no longer GRANT predefined roles PG Doc comments form <noreply@postgresql.org>
@ 2024-05-02 10:36 ` Laurenz Albe <laurenz.albe@cybertec.at>
2024-05-14 01:34 ` Re: roles that have the CREATEROLE privilege can no longer GRANT predefined roles David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 1 reply; 3+ messages in thread
From: Laurenz Albe @ 2024-05-02 10:36 UTC (permalink / raw)
To: shamilsadique@gmail.com; pgsql-docs@lists.postgresql.org
On Wed, 2024-05-01 at 16:09 +0000, PG Doc comments form wrote:
> Page: https://www.postgresql.org/docs/16/predefined-roles.html
>
> roles that have the CREATEROLE privilege can no longer GRANT predefined
> roles unless they are part of it having the WITH ADMIN option. this needs to
> be corrected in the documentation
I see what you mean. This text:
Administrators (including roles that have the CREATEROLE privilege)
can GRANT these roles to users and/or other roles ...
should probably become
Administrators (including roles that have the CREATEROLE privilege and have been
granted the predefined role with the ADMIN option)
can GRANT these roles to users and/or other roles ...
Yours,
Laurenz Albe
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: roles that have the CREATEROLE privilege can no longer GRANT predefined roles
2024-05-01 16:09 roles that have the CREATEROLE privilege can no longer GRANT predefined roles PG Doc comments form <noreply@postgresql.org>
2024-05-02 10:36 ` Re: roles that have the CREATEROLE privilege can no longer GRANT predefined roles Laurenz Albe <laurenz.albe@cybertec.at>
@ 2024-05-14 01:34 ` David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 0 replies; 3+ messages in thread
From: David G. Johnston @ 2024-05-14 01:34 UTC (permalink / raw)
To: Laurenz Albe <laurenz.albe@cybertec.at>; +Cc: shamilsadique@gmail.com; pgsql-docs@lists.postgresql.org
On Thu, May 2, 2024 at 3:36 AM Laurenz Albe <laurenz.albe@cybertec.at>
wrote:
> On Wed, 2024-05-01 at 16:09 +0000, PG Doc comments form wrote:
> > Page: https://www.postgresql.org/docs/16/predefined-roles.html
> >
> > roles that have the CREATEROLE privilege can no longer GRANT predefined
> > roles unless they are part of it having the WITH ADMIN option. this
> needs to
> > be corrected in the documentation
>
> I see what you mean. This text:
>
> Administrators (including roles that have the CREATEROLE privilege)
> can GRANT these roles to users and/or other roles ...
>
> should probably become
>
> Administrators (including roles that have the CREATEROLE privilege and
> have been
> granted the predefined role with the ADMIN option)
> can GRANT these roles to users and/or other roles ...
>
>
I would suggest just replacing the attempt at describing "performing
group membership" here with a link to:
https://www.postgresql.org/docs/current/role-membership.html
Like this:
"Normal roles can exercise these privileges by being added as
member of these group roles as described in <xref>."
There isn't anything about these predefined roles and role membership that
doesn't apply to any other role.
Though skimming that section it seems to need updating along the lines
discussed above.
David J.
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2024-05-14 01:34 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-05-01 16:09 roles that have the CREATEROLE privilege can no longer GRANT predefined roles PG Doc comments form <noreply@postgresql.org>
2024-05-02 10:36 ` Laurenz Albe <laurenz.albe@cybertec.at>
2024-05-14 01:34 ` David G. Johnston <david.g.johnston@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox