pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Stephen Frost <sfrost@snowman.net>
To: Gilles Darold <gilles@darold.net>
Cc: pgsql-hackers@lists.postgresql.org
Subject: Re: New default role- 'pg_read_all_data'
Date: Fri, 28 Aug 2020 13:25:32 -0400
Message-ID: <20200828172532.GD29590@tamriel.snowman.net> (raw)
In-Reply-To: <1091e05d-66fa-b56c-9b60-dc1bde6cf9dc@darold.net>
References: <20200828003023.GU29590@tamriel.snowman.net>
	<CABUevEy9QAnx5h_BmSk4j6K9AfS9=co15RUFda0kknMHO9NJOg@mail.gmail.com>
	<20200828123847.GV29590@tamriel.snowman.net>
	<CABUevEx5akfNeSrHsinCRWfXzSYFNRTnBc4vHKMgum8hLrr=yg@mail.gmail.com>
	<20200828132645.GZ29590@tamriel.snowman.net>
	<6a78c0d5-d010-f2b5-198f-b35eb152f3c4@darold.net>
	<20200828145219.GA29590@tamriel.snowman.net>
	<1091e05d-66fa-b56c-9b60-dc1bde6cf9dc@darold.net>

Greetings,

* Gilles Darold (gilles@darold.net) wrote:
> Le 28/08/2020 à 16:52, Stephen Frost a écrit :
> >Using an FDW will often also require having a user mapping and there's
> >no way for that to be accomplished through only GRANT'ing a default
> >role, so I don't think we should mix this specific role with the FDW
> >permissions system.
> 
> I'm fine with that, perhaps it should be mentioned in the documentation that
> foreign tables are not covered by this role.

We could say it doesn't GRANT CONNECT rights on databases, or EXECUTE on
functions too, but that doesn't seem like a terribly good approach for
the documentation to take- instead we document specifically what IS
included, which seems sufficiently clear to me.

Thanks,

Stephen

Attachments:

  signature.asc (application/pgp-signature, 818B) download

view thread (25+ messages)  latest in thread

Message-ID: <20200828172532.GD29590@tamriel.snowman.net>
Permalink:  ../20200828172532.GD29590@tamriel.snowman.net/
Also on:    postgresql.org/message-id/20200828172532.GD29590@tamriel.snowman.net

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: sfrost@snowman.net, gilles@darold.net, pgsql-hackers@lists.postgresql.org
  Subject: Re: New default role- 'pg_read_all_data'
  In-Reply-To: <20200828172532.GD29590@tamriel.snowman.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox