Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oH6Qu-0006XA-TV for pgsql-hackers@arkaria.postgresql.org; Thu, 28 Jul 2022 16:32:21 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1oH6Qt-00031T-R5 for pgsql-hackers@arkaria.postgresql.org; Thu, 28 Jul 2022 16:32:19 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oH6Qt-00031K-0j for pgsql-hackers@lists.postgresql.org; Thu, 28 Jul 2022 16:32:19 +0000 Received: from mail-pf1-x42d.google.com ([2607:f8b0:4864:20::42d]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1oH6Qq-0005bS-Ap for pgsql-hackers@postgresql.org; Thu, 28 Jul 2022 16:32:17 +0000 Received: by mail-pf1-x42d.google.com with SMTP id c3so2340568pfb.13 for ; Thu, 28 Jul 2022 09:32:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=6X6bkikxjUjWqi/7qfxe/JsSOKJmOi8cgTzujC4b31Y=; b=dWGZaIWANAKlUjoQUqv6pSjc6B3VIPwWMPqkrLcQawCN2J3sg0ZcpeUjSToF2oVa+u YbQ3GtpRr8H3fsOVy/1YR1fCaSfBzbPaRaNbKIZNyAeyPqJszkNH6uEFucONDSEmFqmy MhQ4dPJztXXNOOkrsidH7L0gI4E0cwxeal3q2e95o2W8WPawwMJ13GAu4fh+2ODsOO54 WLuNzNznuDajKV+NjRrm+F5Xfx3Rx3j+fkYFFpD6jrOyS2HIx3+IpJCmE7vKuOs71BaX n+zgw/FZjI0k/FExgfEgvS4Md/uZ1NNiBQtLpL6UQXrBJiik/s9jVl13zPsOq7ZjSWYm /b2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=6X6bkikxjUjWqi/7qfxe/JsSOKJmOi8cgTzujC4b31Y=; b=TWLPmPfemAXGkZmn7ONhXEWzyYue39DEEJGNVV5AGi7H2TEFOZi3TlUb9YvofNZXlq mlV8dFRl1PSes09+eJxaKVGRLt61+2/Qx7/UFCTaw4A6fGyXlHrMnuf7s9EGceb8iXS3 D38J0tKQcwZ1OdzAuchZjc13VxWRKf8BMV3RHttAYxFMBNlwYNxQ1xkrzZ8rfu7q3xgW ZqfFeBAyrIOIH1TsWwK3QC7/kn7tzgV/I1qilHFMuF3QpgZlFwx393TWX7c4SkfVRMao /v7l1hMsop48TqvloqB1XFCsO+pOJRl3JD/fjZOQm1ur0XQjgEflYyZbGP//1YX1Rdb4 v3fQ== X-Gm-Message-State: AJIora8FAApHf7Fa+XAeHNQfnuZpXGTgF2Unuhx41KtoRU02cma8bctZ xTiSpJNZpZlGp62M99XJBg+eodLJa/+ALImvM6IRPHH6e4AlmS5/JmLa9k1zPQ7RxzjdUpFxz0z CkAUjs3V7NrhY0mcG5FRgg7RzOCjnDSpBbeVn416WWDUfMEPDxWHn1jNu9i76u7AALn0aNlWPtt MAaxXR5/dwTCWPCP0VrkgUdndUQw8DT4H0szofLJQxh+d9kTDN+N6NkE3BtKtUlsJj/sRmnHYG/ OcZ0Y8tg97Bw4I2bMIK/ZEGZwLy/8PA002c5w== X-Google-Smtp-Source: AGRyM1uTbjBLGJPPvLI/Chn+l1TklBOYwWrz27jHBwa4zEgfWr5jNxLTJ+v1WFirKLj45gByXg31fg== X-Received: by 2002:a05:6a00:1a0e:b0:52a:cef3:b4a1 with SMTP id g14-20020a056a001a0e00b0052acef3b4a1mr27255516pfv.23.1659025934304; Thu, 28 Jul 2022 09:32:14 -0700 (PDT) Received: from localhost.localdomain ([114.143.109.178]) by smtp.gmail.com with ESMTPSA id u17-20020a170903125100b0016db43e5212sm1520161plh.175.2022.07.28.09.32.09 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 28 Jul 2022 09:32:13 -0700 (PDT) Subject: Re: replacing role-level NOINHERIT with a grant-level option To: Robert Haas Cc: Nathan Bossart , Joe Conway , Tom Lane , "Bossart, Nathan" , Stephen Frost , PostgreSQL-development References: <20220701025830.GA369935@nathanxps13> <20220701211225.GA418166@nathanxps13> <20220702221635.GB1044460@nathanxps13> <20220703171742.GB1048244@nathanxps13> <8210e573-c861-fe45-302b-56d7352aae48@enterprisedb.com> From: tushar Message-ID: <030c1dbf-5a8e-706d-698c-b1cdfcb6ce0f@enterprisedb.com> Date: Thu, 28 Jul 2022 22:02:03 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-CLOUD-SEC-AV-Info: enterprisedb,google_mail,monitor X-CLOUD-SEC-AV-Sent: true X-Gm-Spam: 0 X-Gm-Phishy: 0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 7/28/22 8:03 PM, Robert Haas wrote: > No, it seems to me that's behaving as intended. REVOKE BLAH OPTION ... > is intended to be a way of switching an option off. Ok, Thanks, Robert. I tested with a couple of more scenarios like pg_upgrade/pg_dumpall /grant/revoke .. with admin option/inherit and things look good to me. -- regards,tushar EnterpriseDB https://www.enterprisedb.com/ The Enterprise PostgreSQL Company