MIME-Version: 1.0
References: <CAFCRh-8JNEy+dV4SXFOrWca50u+d=--TO4cq=+ac1oBtfJy4AA@mail.gmail.com>
 <42cf78d42a376bf05ca9f5776ad29edc30e784d5.camel@cybertec.at>
 <CA+TgmobvCGAHPZxX1rNgUb1cGcmD5e8ESGVSL=OyVqDYCAV3EQ@mail.gmail.com>
 <2468702.1726856198@sss.pgh.pa.us> <2470834.1726857267@sss.pgh.pa.us>
In-Reply-To: <2470834.1726857267@sss.pgh.pa.us>
From: Robert Haas <robertmhaas@gmail.com>
Date: Fri, 20 Sep 2024 14:49:13 -0400
Message-ID: <CA+TgmoZ44MXgcgLwyPJJ8kypRezOJ=BOUsAPs9Q=rJGKQQLCwA@mail.gmail.com>
Subject: Re: Why no pg_has_role(..., 'ADMIN')?
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>, Dominique Devienne <ddevienne@gmail.com>, 
	pgsql-general@postgresql.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/CA%2BTgmoZ44MXgcgLwyPJJ8kypRezOJ%3DBOUsAPs9Q%3DrJGKQQLCwA%40mail.gmail.com>
Precedence: bulk

On Fri, Sep 20, 2024 at 2:34=E2=80=AFPM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> I'm now inclined to add wording within the pg_has_role entry, along
> the lines of
>
>     WITH ADMIN OPTION or WITH GRANT OPTION can be added to any of
>     these privilege types to test whether ADMIN privilege is held
>     (all six spellings test the same thing).

I don't have an opinion about the details, but +1 for documenting it
somehow. I also think it's weird that we have six spellings that test
the same thing, none of which are $SUBJECT. pg_has_role seems a little
half-baked to me...

--=20
Robert Haas
EDB: http://www.enterprisedb.com