From: Nathan Bossart <nathandbossart@gmail.com>
To: Jeff Davis <pgsql@j-davis.com>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Ted Yu <yuzhihong@gmail.com>
Cc: Pavel Luzanov <p.luzanov@postgrespro.ru>
Cc: Justin Pryzby <pryzby@telsasoft.com>
Cc: pgsql-hackers@postgresql.org
Subject: Re: allow granting CLUSTER, REFRESH MATERIALIZED VIEW, and REINDEX
Date: Tue, 20 Jun 2023 10:42:10 -0700
Message-ID: <20230620174210.GB471329@nathanxps13> (raw)
In-Reply-To: <61b81ec0783aefbc59be06a3c3849118aa6199b9.camel@j-davis.com>
References: <ZIj4v1CwqlDVJZfB@paquier.xyz>
<20230613235442.GA222795@nathanxps13>
<20230614181711.GA488295@nathanxps13>
<ZIpfack6qJUHaw+g@paquier.xyz>
<20230615041044.GA736001@nathanxps13>
<20230615235700.GA877311@nathanxps13>
<20230616052025.GA1026700@nathanxps13>
<20230619215534.GA442477@nathanxps13>
<ZJE4kgKgDM55qC24@paquier.xyz>
<61b81ec0783aefbc59be06a3c3849118aa6199b9.camel@j-davis.com>
On Tue, Jun 20, 2023 at 09:16:59AM -0700, Jeff Davis wrote:
> On Tue, 2023-06-20 at 14:26 +0900, Michael Paquier wrote:
>> TBH, I have a mixed feeling about this line of reasoning because
>> MAINTAIN is much broader and less specific than TRUNCATE, for
>> instance, being spawned across so much more operations.
>
> ...
>
>> Some users may find that surprising as they
>> used to have more control over these operations as owners of the
>> relations worked on.
>
> It seems like the user shouldn't be surprised if they can carry out the
> action; nor should they be surprised if they can't carry out the
> action. Having privileges revoked on a table from the table's owner is
> an edge case in behavior and both make sense to me.
>
> In the absense of a use case, I'd be inclined towards just being
> consistent with the other privileges.
Agreed, I think we should make MAINTAIN consistent with the other grantable
privileges.
--
Nathan Bossart
Amazon Web Services: https://aws.amazon.com
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: nathandbossart@gmail.com, pgsql@j-davis.com, michael@paquier.xyz, yuzhihong@gmail.com, p.luzanov@postgrespro.ru, pryzby@telsasoft.com
Subject: Re: allow granting CLUSTER, REFRESH MATERIALIZED VIEW, and REINDEX
In-Reply-To: <20230620174210.GB471329@nathanxps13>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox