Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ogP8V-0003Zj-AI for pgsql-hackers@arkaria.postgresql.org; Thu, 06 Oct 2022 11:33:55 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1ogP8T-0000BU-Se for pgsql-hackers@arkaria.postgresql.org; Thu, 06 Oct 2022 11:33:53 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ogP8T-0000Av-5n for pgsql-hackers@lists.postgresql.org; Thu, 06 Oct 2022 11:33:53 +0000 Received: from mail-vs1-xe34.google.com ([2607:f8b0:4864:20::e34]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1ogP8P-0001hI-6E for pgsql-hackers@postgresql.org; Thu, 06 Oct 2022 11:33:51 +0000 Received: by mail-vs1-xe34.google.com with SMTP id l127so1701984vsc.3 for ; Thu, 06 Oct 2022 04:33:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joeconway.com; s=google; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=kYztoXbLfcgC+zG1zBEpZLaLP8JiwBw/K1+9cGJeUSI=; b=iydW2Iu9+S/xe9TEhppD6Tf3lWAkmAjjWDdqM4eI42VifUSIsjyYma9ibXI6S6XvrY HavOgtlWtCTLb72mZDxugaIG9FFGcO2w4pTlXHzZZRMfOXwiC9Hk56PUSjdFYMf55Gm7 H479iPfoaGTHq5CQMPNn9Jm0JJe6Tr/+j77iW0YgY1ekPKOXMKFp0tQVuCVwcg6cMEKt uGs8ryqoJVAaCX9CYWXvMuLMcV1KOoWr1wysO/0R9ctnZpQVIvzhlRFgMsYpPcXceYWh aN9vrjQHIyTwb1lMvYtSZiEigZRllCRiQ2SrS+66sXbytFYita3s+gaUR/BRQ9FIUZW0 3mAw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=kYztoXbLfcgC+zG1zBEpZLaLP8JiwBw/K1+9cGJeUSI=; b=0fMComEgQXF0Xjzm1gA9/SIe3IMkEvCX1opA/BScRQ1P2d6jUOjEpYdvtta7rfOkB2 aGMb0jsfn7GaQZQ3vJNqIi5epUINil0by02lg8p0k1Lf28nv61KS9v5yalcOQM/gKSg6 2G3eaKioR0tKafcTemdSVDZOEAbaWtzBVTH/lp6y94n8420hI1s4GUNMja5LoMMXaK34 WUYfq2S+4nAnki5MzR7/C2/CXMF7AW/atyOw+JsrZ6upFT7vrqFDG0U8XtONAMJw8yBh SvDk+G+Pl4vexb+bE5t2VQAuEHpeyCgcHSyd8waW93BAkZ1rMAJ5TMV5uyoMyXRX08GY cCpg== X-Gm-Message-State: ACrzQf1gp5CkxKy5yE8lE7mBMTF8xyTDXvQ0Br8hBYUa+jxIdsCRYN+I O/B8EC9/u0PfvZ5XVIiSd8AOzw== X-Google-Smtp-Source: AMsMyM4vXRBCjubAt08aaZC4npC2CwmHDDDbFaEabs1pmAkgy/yX6p8w9VcYv35uoQwnveaJ0OugsA== X-Received: by 2002:a05:6102:3348:b0:3a4:fdcb:5333 with SMTP id j8-20020a056102334800b003a4fdcb5333mr2077988vse.67.1665056028195; Thu, 06 Oct 2022 04:33:48 -0700 (PDT) Received: from [192.168.4.41] (072-017-018-098.res.spectrum.com. [72.17.18.98]) by smtp.gmail.com with ESMTPSA id q127-20020a1fa785000000b003a8721c1159sm10135282vke.38.2022.10.06.04.33.47 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 06 Oct 2022 04:33:47 -0700 (PDT) Message-ID: <491dba16-55df-d5fd-1ae7-01b5140987f0@joeconway.com> Date: Thu, 6 Oct 2022 07:33:46 -0400 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0 Subject: Re: use has_privs_of_role() for pg_hba.conf Content-Language: en-US To: Michael Paquier , Nathan Bossart Cc: Joshua Brindle , PostgreSQL-development References: <20220401220648.GA615994@nathanxps13> <20220404142551.GB663209@nathanxps13> From: Joe Conway In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 10/6/22 04:09, Michael Paquier wrote: > On Mon, Apr 04, 2022 at 07:25:51AM -0700, Nathan Bossart wrote: >> On Mon, Apr 04, 2022 at 09:36:13AM -0400, Joshua Brindle wrote: >>> Good catch, I think this is a logical followup to the previous >>> has_privs_of_role patch. >>> >>> Reviewed and +1 >> >> Thanks! I created a commitfest entry for this: > > This patch looks simple, but it is a very sensitive area so I think > that we should be really careful. pg_hba.conf does not have a lot of > test coverage, so I'd really prefer if we add something to see the > difference of behavior and check the behavior that we are switching > here. Agreed > Joe, you are registered as a reviewer and committer of this patch, by > the way. Are you planning to look at it? I am meaning to get to it, but as you say wanted to spend some time to understand the nuances and life keeps getting in the way. I will try to prioritize it over the next week. Joe -- Joe Conway PostgreSQL Contributors Team RDS Open Source Databases Amazon Web Services: https://aws.amazon.com