Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1csvrn-0006RT-Ic for pgsql-hackers@arkaria.postgresql.org; Tue, 28 Mar 2017 18:29:15 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1csvrm-0000rV-O7 for pgsql-hackers@arkaria.postgresql.org; Tue, 28 Mar 2017 18:29:14 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1csvrk-0000p6-Dc for pgsql-hackers@postgresql.org; Tue, 28 Mar 2017 18:29:12 +0000 Received: from tamriel.snowman.net ([72.66.115.51]) by magus.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1csvri-0003CU-4u for pgsql-hackers@postgresql.org; Tue, 28 Mar 2017 18:29:11 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id 756F05F796; Tue, 28 Mar 2017 14:29:09 -0400 (EDT) Date: Tue, 28 Mar 2017 14:29:09 -0400 From: Stephen Frost To: Mark Dilger Cc: Dave Page , Peter Eisentraut , Robert Haas , PostgreSQL Hackers Subject: Re: Monitoring roles patch Message-ID: <20170328182909.GH9812@tamriel.snowman.net> References: <20170322131510.GC9812@tamriel.snowman.net> <20170323122335.GK9812@tamriel.snowman.net> <957FCA21-99DA-4477-9A6E-C86ACAC23E36@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="tWfZZCxtqdqbuAVM" Content-Disposition: inline In-Reply-To: <957FCA21-99DA-4477-9A6E-C86ACAC23E36@gmail.com> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.13.0-91-generic (x86_64) X-Uptime: 14:27:08 up 262 days, 19:51, 23 users, load average: 0.18, 0.17, 0.13 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --tWfZZCxtqdqbuAVM Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Greetings, * Mark Dilger (hornschnorter@gmail.com) wrote: > The inability to revoke access to this sort of information being proposed > makes me a bit uneasy. =20 What data are you concerned about, specifically? > Mostly, I think, I'm bothered because there may > be people who have revoked privileges on a lot of things, thereby restric= ting > access to superuser, who won't necessarily notice this new feature in > postgres 10. That could be a source of security holes that we get blamed > for. There is no access granted by adding this role without an admin granting access to this role to some other user. If they make incorrect assumptions about what granting access to this role means then I'm afraid that's their issue, not ours. > Please note that I'm not specifically opposed to this work, and see a lot > of merit here. I'm just thinking about unintended consequences. Certainly, good to think of, but I don't believe there's a concern here. Thanks! Stephen --tWfZZCxtqdqbuAVM Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJY2qt1AAoJEO1sijiDR2RV96AP/3hGksKrDqpdBgIy2g73t70U Yp6fTls0ZgZyE5d6GjFXdWx88yPpbnlF8oqnXtxz0a2pmDSXbqz9Qatx/qpnSPzY U+SHU6ckHiif97Tl/AnloY3wwYiGMH4WIsguGHR9CG2g5cq9bDlHgp8RP/V1No71 270h/z2rPNVjrFpB7WBvtCCy/hEpdeq9w5QJgOTpZqPmS6U8m79X8O0nnjR5Rel0 aMuUKrugYV+bdjEFDhF4j/ZTFyxcwMPCHDur+18g3rC1rN/X/6pEKFumK+7m6S6Z L7Qhg9UckDhBvQrskqVksiEhoNavr7EfJjtpzHdHuvEJp7IWq78AYkitYcWJyJ3F PKd158l347k2L6AaPtzx8ObLKtg35TAxkWR79Zo/UUT00xrjitAMq6GZ1J0gcrFj 0e0DWBegZ058IWymEgnXSkzLcoQu1HE97fZjZ/hosiRHHqyfN5yt4eik+rPZKEh7 sB8ZZko4V2ZB+d7xT7jmGHb5354TQcag+0EmEaPnb8kWKgx+ZmpwFswKrMCJ2/gO /XVG+juX8TPsb3pXVujgcimXQyPHH5gjclYX1MNyZA67ocYjVAYBT9AunIQS9u5T 1aGRr77FPCnThTXae2YmCdLHJX9rVAulGEw5bcxBuxtvz3L/QN4g06RJclgpt+4k g5QFTqX5pW0SLcDJrSpu =fHTW -----END PGP SIGNATURE----- --tWfZZCxtqdqbuAVM--