From: Andrew Dunstan <andrew@dunslane.net>
To: Nathan Bossart <nathandbossart@gmail.com>
To: Michael Paquier <michael@paquier.xyz>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Isaac Morland <isaac.morland@gmail.com>
Cc: Justin Pryzby <pryzby@telsasoft.com>
Cc: Pavel Luzanov <p.luzanov@postgrespro.ru>
Cc: pgsql-hackers@postgresql.org
Subject: Re: add \dpS to psql
Date: Mon, 12 Dec 2022 07:01:01 -0500
Message-ID: <09d09155-7ed0-29e2-c51b-e5cce7e68bf0@dunslane.net> (raw)
In-Reply-To: <20221209184411.GB59417@nathanxps13>
References: <661148f4-c7f1-dec1-2bc8-29f3bd58e242@postgrespro.ru>
<20221208023929.GB27893@telsasoft.com>
<20221208041900.GB216874@nathanxps13>
<39743.1670473532@sss.pgh.pa.us>
<CAMsGm5drUvuH789D98Wo_bZggNhUn1LsBYuheJUbKaBsErtY9w@mail.gmail.com>
<20221208050754.GA221222@nathanxps13>
<45224.1670476523@sss.pgh.pa.us>
<20221208171503.GA2113@nathanxps13>
<Y5K7MxuH7Bi+zU5V@paquier.xyz>
<20221209184055.GA59417@nathanxps13>
<20221209184411.GB59417@nathanxps13>
On 2022-12-09 Fr 13:44, Nathan Bossart wrote:
> On Fri, Dec 09, 2022 at 10:40:55AM -0800, Nathan Bossart wrote:
>> On Fri, Dec 09, 2022 at 01:36:03PM +0900, Michael Paquier wrote:
>>> On Thu, Dec 08, 2022 at 09:15:03AM -0800, Nathan Bossart wrote:
>>>> The main idea behind this work is breaking out privileges into more
>>>> granular pieces. If I want to create a role that only runs VACUUM on some
>>>> tables on the weekend, why Ń•hould I have to also give it the ability to
>>>> ANALYZE, REFRESH, CLUSTER, and REINDEX? IMHO we should really let the user
>>>> decide what set of privileges makes sense for their use-case. I'm unsure
>>>> the grouping all these privileges together serves much purpose besides
>>>> preserving ACL bits.
>>> Hmm. I'd like to think that we should keep a frugal mind here. More
>>> bits are now available, but it does not strike me as a good idea to
>>> force their usage more than necessary, so grouping all these no-quite
>>> DDL commands into the same bag does not sound that bad to me.
>> Okay, it seems I am outnumbered. I will work on updating the patch to add
>> an ACL_MAINTAIN bit and a pg_maintain_all_tables predefined role.
> Any thoughts on $SUBJECT?
Yeah, the discussion got way off into the weeds here. I think the
original proposal seems reasonable. Please add it to the next CF if you
haven't already.
cheers
andrew
--
Andrew Dunstan
EDB: https://www.enterprisedb.com
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: andrew@dunslane.net, nathandbossart@gmail.com, michael@paquier.xyz, tgl@sss.pgh.pa.us, isaac.morland@gmail.com, pryzby@telsasoft.com, p.luzanov@postgrespro.ru
Subject: Re: add \dpS to psql
In-Reply-To: <09d09155-7ed0-29e2-c51b-e5cce7e68bf0@dunslane.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox