From: Stephen Frost <sfrost@snowman.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Kyotaro Horiguchi <horikyota.ntt@gmail.com>
Cc: alvherre@2ndquadrant.com
Cc: chris+postgresql@qwirx.com
Cc: pgsql-docs@lists.postgresql.org
Cc: pgsql-hackers@lists.postgresql.org
Cc: peter.eisentraut@2ndquadrant.com
Subject: Re: Logical replication subscription owner
Date: Sat, 9 May 2020 14:09:33 -0400
Message-ID: <20200509180933.GN13712@tamriel.snowman.net> (raw)
In-Reply-To: <3747.1589037446@sss.pgh.pa.us>
References: <17709.1588908623@sss.pgh.pa.us>
<20200508050211.GA6945@alvherre.pgsql>
<20200508.150326.909507514141434296.horikyota.ntt@gmail.com>
<20200509085701.GM11539@paquier.xyz>
<3747.1589037446@sss.pgh.pa.us>
Greetings,
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Michael Paquier <michael@paquier.xyz> writes:
> > Not to make the life of everybody more complicated here, but I don't
> > agree. LOGIN and REPLICATION are in my opinion completely orthogonal
> > and it sounds more natural IMO that a REPLICATION user should be able
> > to log into the server only if it has LOGIN defined.
>
> ISTM those statements are contradictory. The two privileges could
> only be called orthogonal if it's possible to make use of one without
> having the other. As things stand, REPLICATION without LOGIN is an
> entirely useless setting.
Allowing a login to the system by a role that doesn't have the LOGIN
privilege isn't sensible though.
Perhaps a middle ground would be to set LOGIN on a role when REPLICATION
is set on it, if it's not already set (maybe with a NOTICE or WARNING or
such saying "also enabling LOGIN for role X", or maybe not if people
really think it should be obvious).
I don't think taking away login should take away replication though as
maybe there's some reason why someone would want that, nor should we
take away login if replication is taken away, this would strictly just
be a change for when REPLICATION is added to a role that doesn't have
LOGIN already.
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: sfrost@snowman.net, tgl@sss.pgh.pa.us, michael@paquier.xyz, horikyota.ntt@gmail.com, alvherre@2ndquadrant.com, chris+postgresql@qwirx.com, pgsql-docs@lists.postgresql.org, pgsql-hackers@lists.postgresql.org, peter.eisentraut@2ndquadrant.com
Subject: Re: Logical replication subscription owner
In-Reply-To: <20200509180933.GN13712@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox