MIME-Version: 1.0
References: <CAFCRh-8+PGGTuqg=rSKA533D0dqYAgq69UzSqMm67VEW02nZyQ@mail.gmail.com>
 <CAKFQuwYK2Vdnbdaxh9QF_0PYpztg51nc-iqYeiKDfpzek7hTdQ@mail.gmail.com>
In-Reply-To: <CAKFQuwYK2Vdnbdaxh9QF_0PYpztg51nc-iqYeiKDfpzek7hTdQ@mail.gmail.com>
From: Dominique Devienne <ddevienne@gmail.com>
Date: Wed, 11 Sep 2024 17:22:40 +0200
Message-ID: <CAFCRh-8ttK7AexZtZq-vcj+u5e2F93HEs63jrkEH0pq6Gf1TWw@mail.gmail.com>
Subject: Re: Backward compat issue with v16 around ROLEs
To: "David G. Johnston" <david.g.johnston@gmail.com>
Cc: "pgsql-general@lists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/CAFCRh-8ttK7AexZtZq-vcj%2Bu5e2F93HEs63jrkEH0pq6Gf1TWw%40mail.gmail.com>
Precedence: bulk

On Wed, Sep 11, 2024 at 5:06=E2=80=AFPM David G. Johnston
<david.g.johnston@gmail.com> wrote:
> As the error indicates, this grant needs to be done with admin option.

Hi David. I did as you suggested, and it fails the same way. Did I
misunderstand you? --DD

D:\pdgm\trunk\psc2>psql service=3Dpau16
psql (17beta3, server 16.1)
Type "help" for help.

ddevienne=3D> create role dd_owner createrole;
CREATE ROLE
ddevienne=3D> create role dd_admin noinherit;
CREATE ROLE
ddevienne=3D> grant dd_owner to dd_admin with admin option; -- <<<<<<<<
GRANT ROLE
ddevienne=3D> grant dd_owner to current_user;
GRANT ROLE
ddevienne=3D> set role dd_owner;
SET
ddevienne=3D> create role dd_user;
CREATE ROLE
ddevienne=3D> grant dd_admin to dd_user;
ERROR:  permission denied to grant role "dd_admin"
DETAIL:  Only roles with the ADMIN option on role "dd_admin" may grant
this role.
ddevienne=3D>