Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iiVGh-0000Hz-UZ for pgsql-hackers@arkaria.postgresql.org; Sat, 21 Dec 2019 03:17:28 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1iiVGf-0002YP-Ui for pgsql-hackers@arkaria.postgresql.org; Sat, 21 Dec 2019 03:17:25 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iiVGf-0002UD-Lq for pgsql-hackers@lists.postgresql.org; Sat, 21 Dec 2019 03:17:25 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1iiVGd-0007QG-6f for pgsql-hackers@lists.postgresql.org; Sat, 21 Dec 2019 03:17:25 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id xBL3HKNL011101; Fri, 20 Dec 2019 22:17:20 -0500 From: Tom Lane To: Michael Paquier cc: Andrew Dunstan , pgsql-hackers@lists.postgresql.org Subject: Re: pgsql: Superuser can permit passwordless connections on postgres_fdw In-reply-to: <20191221021806.GA15758@paquier.xyz> References: <20191220120208.GA4258@paquier.xyz> <11297.1576868677@sss.pgh.pa.us> <32150.1576870942@sss.pgh.pa.us> <20191221021806.GA15758@paquier.xyz> Comments: In-reply-to Michael Paquier message dated "Sat, 21 Dec 2019 11:18:06 +0900" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <11099.1576898240.1@sss.pgh.pa.us> Date: Fri, 20 Dec 2019 22:17:20 -0500 Message-ID: <11100.1576898240@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Michael Paquier writes: > On Fri, Dec 20, 2019 at 02:42:22PM -0500, Tom Lane wrote: >> I notice in testing this that the "nosuper" business added by >> 6136e94dc is broken in more ways than what the buildfarm is >> complaining about: it leaves the role around at the end of the >> test. > Roles left behind at the end of a test are annoying. Here is an idea: > make pg_regress check if any roles prefixed by "regress_" are left > behind at the end of a test. This will not work until test_pg_dump is > cleaned up, just a thought. Yeah, it's sort of annoying that the buildfarm didn't notice this aspect of things. I'm not sure I want to spend cycles on checking it in every test run, though. Maybe we could have -DENFORCE_REGRESSION_TEST_NAME_RESTRICTIONS enable a check for that aspect along with what it does now? regards, tom lane