public inbox for [email protected]  
help / color / mirror / Atom feed
From: Robert Haas <[email protected]>
To: Nathan Bossart <[email protected]>
Cc: David G. Johnston <[email protected]>
Cc: [email protected]
Subject: Re: improve predefined roles documentation
Date: Mon, 24 Jun 2024 14:44:33 -0400
Message-ID: <CA+TgmobSbh2eLHPXi-eTmGy80f6Wq72eDef_sDcpB2-8RBi6OQ@mail.gmail.com> (raw)
In-Reply-To: <ZnWe3RgnCV4RR9KB@nathan>
References: <ZmtM-4-eRtq8DRf6@nathan>
	<CA+TgmoYhyieAwqvGYRTdz92ySFCScjsPLh_KySZohtWBfW-Usg@mail.gmail.com>
	<ZnG7PNN6BK32G_6B@nathan>
	<CAKFQuwZTGgQs1TB=yxHhBAkLK1HCeiQkZnxR=gYi9sqw1bB-ng@mail.gmail.com>
	<ZnWe3RgnCV4RR9KB@nathan>

On Fri, Jun 21, 2024 at 11:40 AM Nathan Bossart
<[email protected]> wrote:
> Done.

If you look at how the varlistentries begin, there are three separate patterns:

* Some document a single role and start with "Allow doing blah blah blah".

* Some document a couple of rolls so there are several paragraphs,
each beginning with "<literal>name_of_role</literal allows doing blah
blah blah". This is sometimes preceded by an introductory paragraph
explaining why this group of roles exists and what it's intended to
do.

* pg_database_owner is completely different from the rest, focusing on
explaining who is in the role rather than what the role gets to do.

I think the first two cases could be made more like each other by
changing the varlistentires that are just about one setting to use the
second format instead of the first, e.g. pg_checkpoint allows
executing the CHECKPOINT command.

I don't know what to do about pg_database_owner. I almost wonder if
that should be moved out of the table and documented as a special
case. Or maybe some more wordsmithing would add clarity. Or maybe it's
fine as-is.

-- 
Robert Haas
EDB: http://www.enterprisedb.com






view thread (9+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: improve predefined roles documentation
  In-Reply-To: <CA+TgmobSbh2eLHPXi-eTmGy80f6Wq72eDef_sDcpB2-8RBi6OQ@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox