Feedback-ID: ia2694551:Fastmail
Date: Wed, 13 Nov 2024 11:29:06 +0100
From: Alvaro Herrera <alvherre@alvh.no-ip.org>
To: Vijaykumar Jain <vijaykumarjain.github@gmail.com>
Cc: pgsql-general <pgsql-general@postgresql.org>, 
	"kaare@jasonic.dk" <kaare@jasonic.dk>
Subject: Re: Fwd: A million users
Message-ID: <202411131029.qchduffwgzhm@alvherre.pgsql>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CAM+6J97Jd5WnxdyFu1-s+wvJrWPL_YvP3yeuQVwy3HJvK=KUTQ@mail.gmail.com>
Archived-At: <https://www.postgresql.org/message-id/202411131029.qchduffwgzhm%40alvherre.pgsql>
Precedence: bulk

On 2024-Nov-13, Vijaykumar Jain wrote:

> I tried to grant select permissions to 5000 different roles on one table,
> It failed with row size too big already at 2443.

But you can grant select to one "reader" role, and grant that one role
to however many other roles you want.  This way you can have an
arbitrary number of roles with indirect access to the table.  In
real-world usage, this is more convenient that granting access to
individual roles on individual tables; likely, you'll grant access to
sets of tables/views/functions/etc rather than exactly one, and you can
manage that more easily if you have one intermediate role to modify than
if you have to mess with 5000 individual roles.

-- 
Álvaro Herrera         PostgreSQL Developer  —  https://www.EnterpriseDB.com/