From: Tom Lane <tgl@sss.pgh.pa.us>
To: Alvaro Herrera <alvherre@2ndquadrant.com>
Cc: Stephen Frost <sfrost@snowman.net>
Cc: chris+postgresql@qwirx.com, pgsql-docs@lists.postgresql.org, pgsql-hackers@lists.postgresql.org, Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Subject: Re: Logical replication subscription owner
Date: Thu, 07 May 2020 23:30:23 -0400
Message-ID: <17709.1588908623@sss.pgh.pa.us> (raw)
In-Reply-To: <20200508014734.GA3552@alvherre.pgsql>
References: <20200508014734.GA3552@alvherre.pgsql>
Alvaro Herrera <alvherre@2ndquadrant.com> writes:
> I'd welcome input from other people on this issue; only now I noticed
> that it's buried in pgsql-docs, so CCing pgsql-hackers now.
FWIW, I would argue that LOGIN permits logging in on a regular SQL
connection, while REPLICATION should permit logging in on a
replication connection, and there's no reason for either to depend on
or require the other.
> On 2020-Apr-23, Stephen Frost wrote:
>> Also- what about per-database connections? Does having REPLICATION mean
>> you get to override the CONNECT privileges on a database, if you're
>> connecting for the purposes of doing logical replication?
No, why would it? Should LOGIN privilege mean you can override
CONNECT? That's nonsense. You need the respective privilege
to connect with the protocol you want to connect with, and you
also need CONNECT on the DB you want to connect to.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: tgl@sss.pgh.pa.us, alvherre@2ndquadrant.com, sfrost@snowman.net, peter.eisentraut@2ndquadrant.com
Subject: Re: Logical replication subscription owner
In-Reply-To: <17709.1588908623@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox