Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p4hUi-00086k-PO for pgsql-hackers@arkaria.postgresql.org; Mon, 12 Dec 2022 12:01:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1p4hUh-0002L0-3f for pgsql-hackers@arkaria.postgresql.org; Mon, 12 Dec 2022 12:01:15 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p4hUg-0002Ja-Qy for pgsql-hackers@lists.postgresql.org; Mon, 12 Dec 2022 12:01:14 +0000 Received: from relay4-d.mail.gandi.net ([2001:4b98:dc4:8::224]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p4hUb-0006J5-Es for pgsql-hackers@postgresql.org; Mon, 12 Dec 2022 12:01:11 +0000 Received: (Authenticated sender: adsend@dunslane.net) by mail.gandi.net (Postfix) with ESMTPSA id C2EC4E0003; Mon, 12 Dec 2022 12:01:03 +0000 (UTC) Message-ID: <09d09155-7ed0-29e2-c51b-e5cce7e68bf0@dunslane.net> Date: Mon, 12 Dec 2022 07:01:01 -0500 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.5.0 Subject: Re: add \dpS to psql Content-Language: en-US To: Nathan Bossart , Michael Paquier Cc: Tom Lane , Isaac Morland , Justin Pryzby , Pavel Luzanov , pgsql-hackers@postgresql.org References: <661148f4-c7f1-dec1-2bc8-29f3bd58e242@postgrespro.ru> <20221208023929.GB27893@telsasoft.com> <20221208041900.GB216874@nathanxps13> <39743.1670473532@sss.pgh.pa.us> <20221208050754.GA221222@nathanxps13> <45224.1670476523@sss.pgh.pa.us> <20221208171503.GA2113@nathanxps13> <20221209184055.GA59417@nathanxps13> <20221209184411.GB59417@nathanxps13> From: Andrew Dunstan In-Reply-To: <20221209184411.GB59417@nathanxps13> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 2022-12-09 Fr 13:44, Nathan Bossart wrote: > On Fri, Dec 09, 2022 at 10:40:55AM -0800, Nathan Bossart wrote: >> On Fri, Dec 09, 2022 at 01:36:03PM +0900, Michael Paquier wrote: >>> On Thu, Dec 08, 2022 at 09:15:03AM -0800, Nathan Bossart wrote: >>>> The main idea behind this work is breaking out privileges into more >>>> granular pieces. If I want to create a role that only runs VACUUM on some >>>> tables on the weekend, why Ń•hould I have to also give it the ability to >>>> ANALYZE, REFRESH, CLUSTER, and REINDEX? IMHO we should really let the user >>>> decide what set of privileges makes sense for their use-case. I'm unsure >>>> the grouping all these privileges together serves much purpose besides >>>> preserving ACL bits. >>> Hmm. I'd like to think that we should keep a frugal mind here. More >>> bits are now available, but it does not strike me as a good idea to >>> force their usage more than necessary, so grouping all these no-quite >>> DDL commands into the same bag does not sound that bad to me. >> Okay, it seems I am outnumbered. I will work on updating the patch to add >> an ACL_MAINTAIN bit and a pg_maintain_all_tables predefined role. > Any thoughts on $SUBJECT? Yeah, the discussion got way off into the weeds here. I think the original proposal seems reasonable. Please add it to the next CF if you haven't already. cheers andrew -- Andrew Dunstan EDB: https://www.enterprisedb.com