Message-ID: <54EE8C6E.8090506@gmx.net>
Date: Wed, 25 Feb 2015 22:01:02 -0500
From: Peter Eisentraut <peter_e@gmx.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10;
 rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: Stephen Frost <sfrost@snowman.net>
CC: Adam Brightwell <adam.brightwell@crunchydatasolutions.com>,
 Noah Misch <noah@leadboat.com>, Tom Lane <tgl@sss.pgh.pa.us>,
 PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: CATUPDATE confusion?
References: 
 <CAKRt6CQOvT2KiyKg2gFf7h9k8+JVU1149zLb0EXTkKk7TAQGMQ@mail.gmail.com>
 <20141227080926.GA2035611@tornado.leadboat.com>
 <20141227151034.GU3062@tamriel.snowman.net> <28382.1419703324@sss.pgh.pa.us>
 <20141227231829.GX3062@tamriel.snowman.net> <1952.1419722762@sss.pgh.pa.us>
 <20141227233150.GA2046947@tornado.leadboat.com>
 <CAKRt6CTrOf6w5sE5GDRQAJ+JQrfK4h8VM=jVCtiGC+mdFsmXGg@mail.gmail.com>
 <54E65000.8030304@gmx.net> <20150225203955.GY29780@tamriel.snowman.net>
In-Reply-To: <20150225203955.GY29780@tamriel.snowman.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

On 2/25/15 3:39 PM, Stephen Frost wrote:
>> I'd get rid of that whole check, not just replace rolcatupdate by rolsuper.
> 
> Err, wouldn't this make it possible to grant normal users the ability to
> modify system catalogs?  I realize that they wouldn't have that
> initially, but I'm not sure we want the superuser to be able to grant
> that to non-superusers..

Why not?  I thought we are trying to get rid of special superuser behavior.

After all, superusers can also make the other user a superuser to bypass
this issue.


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers