Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oT8Xa-0002Tt-J6 for pgsql-docs@arkaria.postgresql.org; Tue, 30 Aug 2022 21:12:58 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1oT8XZ-0005n1-89 for pgsql-docs@arkaria.postgresql.org; Tue, 30 Aug 2022 21:12:57 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oT8XZ-0005ms-1H for pgsql-docs@lists.postgresql.org; Tue, 30 Aug 2022 21:12:57 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oT8XW-00067l-Mt for pgsql-docs@lists.postgresql.org; Tue, 30 Aug 2022 21:12:55 +0000 Received: from bruce by momjian.us with local (Exim 4.94.2) (envelope-from ) id 1oT8XV-00DF9R-Bh; Tue, 30 Aug 2022 17:12:53 -0400 Date: Tue, 30 Aug 2022 17:12:53 -0400 From: Bruce Momjian To: org.postgresql@a12l.xyz, pgsql-docs@lists.postgresql.org Subject: Re: [`] Paragraph doesn't match example in Message-ID: References: <166172242014.1235920.18286236954286204555@wrigleys.postgresql.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <166172242014.1235920.18286236954286204555@wrigleys.postgresql.org> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Sun, Aug 28, 2022 at 09:33:40PM +0000, PG Doc comments form wrote: > The following documentation comment has been logged on the website: > > Page: https://www.postgresql.org/docs/14/role-membership.html > Description: > > In § 22.3 there's a paragraph stating > > > Immediately after connecting as role joe, a database session will have use > of privileges granted directly to joe plus any privileges granted to admin, > because joe “inherits” admin's privileges. > > But in the code block directly presiding that paragraph contain the command > `CREATE ROLE admin NOINHERIT;`. Uh, the text says: NOINHERIT These clauses determine whether a role “inherits” the privileges of roles it is a member of. A role with the INHERIT attribute can automatically use whatever database privileges have been granted to all roles it is directly or indirectly a member of. Without INHERIT, membership in another role only grants the ability to SET ROLE to that other role; the privileges of the other role are only available after having done so. If not specified, INHERIT is the default. The controls whether the role being created inherits anything, not how role members behave. -- Bruce Momjian https://momjian.us EDB https://enterprisedb.com Indecision is a decision. Inaction is an action. Mark Batterson