Feedback-ID: i1ff147bf:Fastmail
From: =?utf-8?Q?Dagfinn_Ilmari_Manns=C3=A5ker?= <ilmari@ilmari.org>
To: Michael Banck <mbanck@gmx.net>
Cc: Chao Li <li.evan.chao@gmail.com>,  Yuhang Qiu <iamqyh@gmail.com>,
  PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH] Add ALTER SYSTEM RELOAD
In-Reply-To: <20260924093522.GA19443@p46.dedyn.io;lightning.p46.dedyn.io>
	(Michael Banck's message of "Thu, 24 Sep 2026 11:35:23 +0200")
References: <5A1F1E3B-D22F-487B-9480-D3DDB5F0C2A1@gmail.com>
	<B254502B-2BF5-4A17-BA04-1E4AA6D878B3@gmail.com>
	<20260924093522.GA19443@p46.dedyn.io;lightning.p46.dedyn.io>
User-Agent: Gnus/5.13 (Gnus v5.13)
Date: Thu, 24 Sep 2026 12:28:35 +0100
Message-ID: <87ld8qq464.fsf@wibble.ilmari.org>
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: 
 <https://www.postgresql.org/message-id/87ld8qq464.fsf%40wibble.ilmari.org>
Precedence: bulk

Michael Banck <mbanck@gmx.net> writes:

> Hi,
>
> On Thu, Sep 24, 2026 at 03:39:22PM +0800, Chao Li wrote:
>> Is there a reason ALTER SYSTEM RELOAD needs stronger privileges than
>> pg_reload_conf()?
>
> Well, it is clear that you won't be able to GRANT this on a SQL-level.
>
> But what could be done is add the pg_maintain (or something similar)
> default role as an allowed user for running this command besides
> Superuser.

There's already GRANT ALTER SYSTEM ON PARAMETER, it would be natural to
extend that with GRANT ALTER SYSTEM RELOAD and whatver other operations
we decide to add.

> Michael

- ilmari