Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qe0md-005UNf-Th for pgsql-hackers@arkaria.postgresql.org; Wed, 06 Sep 2023 22:13:59 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1qe0mc-00DXc9-Ga for pgsql-hackers@arkaria.postgresql.org; Wed, 06 Sep 2023 22:13:58 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qe0mc-00DXbs-5c for pgsql-hackers@lists.postgresql.org; Wed, 06 Sep 2023 22:13:57 +0000 Received: from mail-oo1-xc2f.google.com ([2607:f8b0:4864:20::c2f]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1qe0mY-003V5Q-Cj for pgsql-hackers@postgresql.org; Wed, 06 Sep 2023 22:13:57 +0000 Received: by mail-oo1-xc2f.google.com with SMTP id 006d021491bc7-572a7141434so169445eaf.2 for ; Wed, 06 Sep 2023 15:13:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1694038432; x=1694643232; darn=postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=ioZ39TaLqTL6lM+ov8N2PmRLmbd7EKH6KGQsDfeYQ6M=; b=RAOzgXcBv/DzMi4ryJE5sp7fSSASyGnP8QCL6K8UMEyqDky+6gViOCBuxs0Uho6zt6 nDtm8N4PfKru96mDUofPwDk+nRSkLi8geRlW9Mn7DO2Sdn5fZYOvDf3pIoH4G2Ce/WLc iaBlbA7j33PDgGAF6mSb3Zg5lqQ8uU5Jwns3JxoR3iYbU/sgRG7hCoLSbPC869szmWhl nXlhMfmitS29rkz90/2fouWYiu0d+NqS146oqh2GqpByF6KxM6rUMbR2siGwAENCXVFT 1w4SwebKZjkSe27WA3dRNAuRY+tlLsA1ggpUvjfQKcZquET8Ize+J+UbYYfQ40QGjGqC Y3Uw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1694038432; x=1694643232; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=ioZ39TaLqTL6lM+ov8N2PmRLmbd7EKH6KGQsDfeYQ6M=; b=N7d+gUnm94qJxs+1tMLGvrkYJqatPQJXPUTrk3vit1Yz/KHsdASzX2Yd0ktm6xo7bG lDLCx4e8HOdE7DfIMoU6rbhGJvoDriuvTKeWdULnfjoL7vwQI8BsMUgKyXTINMw7k1NT puo0FmDrE62VBMRMONsW7tvVf+AjlgIZV15sL1BEbojQt3Hvh6RMStp5eBX2gsiaqXLT yhFJdY+BI+BFci2HaugVhRsZuqufGfnkna/DTEHzvGbDH7PoT5XUA9e3PISIXRYei4Xc Aj50FKnwT8TLo/IeGLjW/C41mrNiNI0oqfgaIL+CQrOHQNdQ46LGp3AW5HAyoccQ8yvw opqQ== X-Gm-Message-State: AOJu0Yw/yBX4t5BLgVnY1tL2lF4ZOS5aPyGf4TKX0hNlHhK6UZTPMTg4 VlbSO2pwyT43sp48oeZdyBoOwqeJVPEtyPZQf2iamcLm X-Google-Smtp-Source: AGHT+IGaIkHUVb51baT4yWsdrzYn4/6PPvFFL+kb/ZT8ECq2F1piZxnHgKhmEDUPxFILL+Z7QIAq2lVHX3OXmFFSYkM= X-Received: by 2002:a4a:db93:0:b0:571:2c9c:12ec with SMTP id s19-20020a4adb93000000b005712c9c12ecmr13817368oou.2.1694038431762; Wed, 06 Sep 2023 15:13:51 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "David G. Johnston" Date: Wed, 6 Sep 2023 15:13:33 -0700 Message-ID: Subject: Re: Can a role have indirect ADMIN OPTION on another role? To: Ashutosh Sharma Cc: Robert Haas , pgsql-hackers Content-Type: multipart/alternative; boundary="000000000000f60c5e0604b80ec9" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --000000000000f60c5e0604b80ec9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Sep 6, 2023 at 1:55=E2=80=AFPM Ashutosh Sharma wrote: > But what if roleB doesn't want to give roleA access to > the certain objects it owns. Not doable - roleA can always pretend they are roleB one way or another since roleA made roleB. David J. --000000000000f60c5e0604b80ec9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Wed, Sep 6, 2023 at 1:55=E2=80=AFPM Ashutosh Sharma <= ;ashu.coek88@gmail.com> wro= te:=C2=A0
But what if roleB doesn't want to give roleA access to=
the certain objects it owns.

Not doable = - roleA can always pretend they are roleB one way or another since roleA ma= de roleB.

David J.

--000000000000f60c5e0604b80ec9--