agora inbox for [email protected]  

help / color / mirror / Atom feed

From: Alvaro Herrera <[email protected]>
To: Stephen Frost <[email protected]>
Cc: [email protected]
Cc: [email protected]
Subject: Re: Logical replication subscription owner
Date: Wed, 22 Apr 2020 18:59:11 -0400
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>

On 2020-Apr-22, Stephen Frost wrote:
> * Alvaro Herrera ([email protected]) wrote:

> > I wonder if a better answer is to allow the connection when the
> > REPLICATION priv is granted, ignoring the LOGIN prov.
> 
> Erm, no, I wouldn't have thought that'd make sense- maybe someone
> specifically wants to stop allowing that role to login and they remove
> LOGIN?  That REPLICATION would override that would surely be surprising
> and counter-intuitive..

Well, I guess if somebody wants to stop replication, they can remove
the REPLICATION priv.

I had it in my mind that LOGIN was for regular (SQL-based) login, and
REPLICATION was for replication login, and that they were orthogonal.

You're saying that there's no way a role can have REPLICATION privs but
no LOGIN.  Is that sensible?

-- 
Álvaro Herrera                https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

view thread (16+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: Logical replication subscription owner
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox