From: Daniel Westermann <daniel.westermann@dbi-services.com>
To: David G. Johnston <david.g.johnston@gmail.com>
Cc: pgsql-docs@lists.postgresql.org <pgsql-docs@lists.postgresql.org>
Subject: Re: docs: set role permission checking, do I read this wrong?
Date: Wed, 18 Oct 2023 09:56:25 +0200
Message-ID: <985846a7-97e6-4c43-a34a-5541faf2c37c@dbi-services.com> (raw)
In-Reply-To: <CAKFQuwY9pa475guw29sppEM3FqcmPRXFeLqCAx1dX2vrzsg7Fg@mail.gmail.com>
References: <93e0bf53-41ae-4718-a1c5-cec36283bbc7@dbi-services.com>
<CAKFQuwY9pa475guw29sppEM3FqcmPRXFeLqCAx1dX2vrzsg7Fg@mail.gmail.com>
On 10/18/23 09:26, David G. Johnston wrote:
> On Wednesday, October 18, 2023, Daniel Westermann
> <daniel.westermann@dbi-services.com> wrote:
>
>
> "After |SET ROLE|, permissions checking for SQL commands is
> carried out as though the named role were the one that had logged
> in originally."
>
> Isn't it the other way around and permission checking is done as
> "a", or do I read this wrong?
>
>
> It is saying “a” is the current_user:
>
> When you set role to (named role) a the system behaves as if (named
> role) a had logged in originally (even though, in that example,
> postgres is the role that originally logged in)
>
> David J.
>
Thank you, this is what I see in the small example. Maybe it is my
English, but this sentence sounds confusing.
Regards
Daniel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: daniel.westermann@dbi-services.com, david.g.johnston@gmail.com, pgsql-docs@lists.postgresql.org
Subject: Re: docs: set role permission checking, do I read this wrong?
In-Reply-To: <985846a7-97e6-4c43-a34a-5541faf2c37c@dbi-services.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox