public inbox for [email protected]
help / color / mirror / Atom feedRe: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
2+ messages / 2 participants
[nested] [flat]
* Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
@ 2024-07-08 19:58 David G. Johnston <[email protected]>
0 siblings, 1 reply; 2+ messages in thread
From: David G. Johnston @ 2024-07-08 19:58 UTC (permalink / raw)
To: Christophe Pettus <[email protected]>; +Cc: pgsql-general
On Mon, Jul 8, 2024 at 12:23 PM Christophe Pettus <[email protected]> wrote:
>
> This is more curiosity than anything else. In the v16 role system, is
> there actually any reason to grant membership in a role to a different
> role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role
> granted membership gain any ability it didn't have before in that case?
>
>
That scenario is allowed but provides no useful in-server behavior. I
suppose the membership presence/absence could be given external meaning by
a DBA. Personally, I'd just add a metric on the server counting these and
alert if it is ever non-zero.
David J.
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
@ 2024-07-08 20:14 Christophe Pettus <[email protected]>
parent: David G. Johnston <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Christophe Pettus @ 2024-07-08 20:14 UTC (permalink / raw)
To: David G. Johnston <[email protected]>; +Cc: pgsql-general
> On Jul 8, 2024, at 12:58, David G. Johnston <[email protected]> wrote:
> That scenario is allowed but provides no useful in-server behavior.
That was my conclusion as well. Thanks!
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2024-07-08 20:14 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-07-08 19:58 Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE David G. Johnston <[email protected]>
2024-07-08 20:14 ` Christophe Pettus <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox