Content-Type: multipart/alternative;
 boundary="------------yIoz00diwA3geLC2AbEukyQJ"
Message-ID: <2e3e4ddb-52b5-49b2-b363-00e3f12a83a0@postgrespro.ru>
Date: Tue, 9 Jul 2024 00:00:35 +0300
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
To: Christophe Pettus <xof@thebuild.com>,
 pgsql-general <pgsql-general@postgresql.org>
References: <69A2A7BD-F8CA-4067-B229-B5F9FC6A884F@thebuild.com>
Content-Language: en-US, ru-RU
From: Pavel Luzanov <p.luzanov@postgrespro.ru>
In-Reply-To: <69A2A7BD-F8CA-4067-B229-B5F9FC6A884F@thebuild.com>
Archived-At: <https://www.postgresql.org/message-id/2e3e4ddb-52b5-49b2-b363-00e3f12a83a0%40postgrespro.ru>
Precedence: bulk

This is a multi-part message in MIME format.
--------------yIoz00diwA3geLC2AbEukyQJ
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

On 08.07.2024 22:22, Christophe Pettus wrote:
> This is more curiosity than anything else.  In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE?  Does the role granted membership gain any ability it didn't have before in that case?

Looks like there is one ability.
Authentication in pg_hba.conf "USER" field via +role syntax.

-- 
Pavel Luzanov
Postgres Professional:https://postgrespro.com

--------------yIoz00diwA3geLC2AbEukyQJ
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    On 08.07.2024 22:22, Christophe Pettus wrote:<span
    style="white-space: pre-wrap">
</span><span style="white-space: pre-wrap">
</span>
    <blockquote type="cite"
      cite="mid:69A2A7BD-F8CA-4067-B229-B5F9FC6A884F@thebuild.com">
      <pre class="moz-quote-pre" wrap="">This is more curiosity than anything else.  In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE?  Does the role granted membership gain any ability it didn't have before in that case?
</pre>
    </blockquote>
    <br>
    Looks like there is one ability.<br>
    Authentication in pg_hba.conf "USER" field via +role syntax.<br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Pavel Luzanov
Postgres Professional: <a class="moz-txt-link-freetext" href="https://postgrespro.com">https://postgrespro.com</a></pre>
  </body>
</html>

--------------yIoz00diwA3geLC2AbEukyQJ--