Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ohDHo-0000Wc-RO for pgsql-hackers@arkaria.postgresql.org; Sat, 08 Oct 2022 17:06:52 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1ohDHn-0007yC-CK for pgsql-hackers@arkaria.postgresql.org; Sat, 08 Oct 2022 17:06:51 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ohDHn-0007y3-1i for pgsql-hackers@lists.postgresql.org; Sat, 08 Oct 2022 17:06:51 +0000 Received: from mail-pj1-x1036.google.com ([2607:f8b0:4864:20::1036]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1ohDHg-0001iq-LF for pgsql-hackers@postgresql.org; Sat, 08 Oct 2022 17:06:49 +0000 Received: by mail-pj1-x1036.google.com with SMTP id 70so6738678pjo.4 for ; Sat, 08 Oct 2022 10:06:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=fUNdA78JajSvQOs3EHExj9SajLDlLDBmJ68uL+WM0xY=; b=IGqbM8Qh0nXg4MbjvWKv54bIT0wx0OGQoQ4IwcdshKNASBXag3IRQpgbkClbASgPCj 3UOMhqDVtBjHdJcNjlBcKf1XQWny2Met5ZiDhu2PamSwb/LO7b5Y18I5bX55eOFELKXH o5MB6s8ePlGhFt9DiATvkJx15b/QEAkEiHl+kyb4AT1EsMKva9WICdvKuh506yd5RmiN gjWTQ00MChNmBtNxRpqL6L53S2ADkbeA/LffJBj3gBfDi+IkM8brONQz1zluhzq2xu+s deJiQ8VNZsAUndwcnQOUIS74KPNKp2y/hsVYyX52VUSJN78szgkhDe1O73NEYWHo9lVs fV2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=fUNdA78JajSvQOs3EHExj9SajLDlLDBmJ68uL+WM0xY=; b=CXAchrk2Ydh2VJT8HJ4kBqUXfe9sxyjc45srqECFbDyQxl4jlh2G0FUVsqY9OQnFQC uinP10OJHKje4grtnhxzoIJeyj3clyefUBGy06rWYc4W6vz0VxHAVvpPMNjeIocx+rH0 OiV6kz2JPo1i6VVa2CD3nF+mc4gzCBeKQFTvOQ8+l7mHvgofabaDujOppaP2eup4Ut3a DBnHXFFQZrG36DWuFnj4wnGWb0l+yKrKhVjMKTampcQBtGQe/j97E4SdUKJ2vL8gsz9Y kJKudv/RZuJRXoLSCnlKRYwa2myO3Rem+OT+3eoY1l2UYN2nqJCj+kjP8sItEgEGduXg 24ZQ== X-Gm-Message-State: ACrzQf1Mdp7Mv3emZle5hLwt1QI6otiHev9DRXfdk4fH6saCjEtZb33J l5JcWQqCMs9tg8OZxztZkcA= X-Google-Smtp-Source: AMsMyM6L09h/Fq2fBwUsHxU8diNX8+ql/XMubXG3RhABKvES6HHa4AJHkqsXvEGuUi2J5aHpGMHAPQ== X-Received: by 2002:a17:90a:d48a:b0:20a:f65b:143c with SMTP id s10-20020a17090ad48a00b0020af65b143cmr11532202pju.199.1665248803563; Sat, 08 Oct 2022 10:06:43 -0700 (PDT) Received: from nathanxps13 ([50.47.162.83]) by smtp.gmail.com with ESMTPSA id e24-20020a63db18000000b0040caab35e5bsm3557404pgg.89.2022.10.08.10.06.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 08 Oct 2022 10:06:42 -0700 (PDT) Date: Sat, 8 Oct 2022 10:06:40 -0700 From: Nathan Bossart To: Robert Haas Cc: Tom Lane , Joe Conway , Michael Paquier , Joshua Brindle , PostgreSQL-development Subject: Re: use has_privs_of_role() for pg_hba.conf Message-ID: <20221008170640.GA825354@nathanxps13> References: <20221006174343.GA444656@nathanxps13> <20221007032711.GA499771@nathanxps13> <20221007194430.GA550749@nathanxps13> <3347532.1665173939@sss.pgh.pa.us> <20221007215836.GB814385@nathanxps13> <87994809-5b2c-08f0-0ab3-3c76c49afada@joeconway.com> <3574712.1665242046@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Sat, Oct 08, 2022 at 11:46:50AM -0400, Robert Haas wrote: > Now there may be some other scenario in which the patch is going in > exactly the right direction, and if I knew what it was, maybe I'd > agree that the patch was a great idea. But I haven't seen anything > like that on the thread. Basically, the argument is just that the > change would make things more consistent. However, it might be an > abuse of the term. If you go out and buy blue curtains because you > have a blue couch, that's consistent interior decor. If you go out and > buy a blue car because you have a blue couch, that's not really > consistent anything, it's just two fairly-unrelated things that are > both blue. I believe I started this thread after reviewing the remaining uses of is_member_of_role() after 6198420 was committed and wondering whether this case was an oversight. If upon closer inspection we think that mere membership is appropriate for pg_hba.conf, I'm fully prepared to go and mark this commitfest entry as Rejected. It obviously does not seem as clear-cut as 6198420. And I'll admit I don't have a concrete use-case in hand to justify the behavior change. -- Nathan Bossart Amazon Web Services: https://aws.amazon.com