Message-ID: <c607b5e4-93c9-4c3d-9a1c-e3210ab91fb8@technowledgy.de>
Date: Fri, 22 Nov 2024 13:57:45 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
From: walther@technowledgy.de
Subject: Re: Fwd: A million users
To: Eric Hanson <eric@aquameta.com>
Cc: Dominique Devienne <ddevienne@gmail.com>,
 Alvaro Herrera <alvherre@alvh.no-ip.org>,
 Vijaykumar Jain <vijaykumarjain.github@gmail.com>,
 pgsql-general <pgsql-general@postgresql.org>,
 "kaare@jasonic.dk" <kaare@jasonic.dk>
References: <CAM+6J97Jd5WnxdyFu1-s+wvJrWPL_YvP3yeuQVwy3HJvK=KUTQ@mail.gmail.com>
 <202411131029.qchduffwgzhm@alvherre.pgsql>
 <CAFCRh-9Le3fkJMWGuHdFPP-kfHdEAAchFZf0msEq3hNijixbFw@mail.gmail.com>
 <7d32e088-34a7-421a-9398-80958acb3f64@technowledgy.de>
 <CACA6kxh5EWZPMR5XCEXh3C-t-bBfdhbge1z+nGFpCOUgbZK+EA@mail.gmail.com>
Content-Language: en-US
In-Reply-To: <CACA6kxh5EWZPMR5XCEXh3C-t-bBfdhbge1z+nGFpCOUgbZK+EA@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: <https://www.postgresql.org/message-id/c607b5e4-93c9-4c3d-9a1c-e3210ab91fb8%40technowledgy.de>
Precedence: bulk

Eric Hanson:
> Did you find some way to prevent RESET ROLE?  I once advocated for a NO 
> RESET option on SET ROLE [1] so that RESET ROLE would be impossible for 
> the rest of the session.  Still think it would be helpful.

Yeah, this is still on my list of things to research more about 
eventually - currently still unsolved.

For my use-case the NO RESET would need to apply until the end of the 
transaction, not end of the session.

I imagine something like an extension, that would:
- block any SET SESSION ROLE
- block any RESET ROLE
- only allow SET LOCAL ROLE when CURRENT_USER has the right to do so

Then the effect of SET LOCAL ROLE would still be reversed at the end of 
the transaction, but you could never "escape" a SET LOCAL ROLE that was 
set earlier.

Best,

Wolfgang