Feedback-ID: i0fe9450f:Fastmail
Date: Wed, 11 Jan 2023 20:05:52 +0900
From: Michael Paquier <michael@paquier.xyz>
To: Jelte Fennema <Jelte.Fennema@microsoft.com>
Cc: "isaac.morland@gmail.com" <isaac.morland@gmail.com>,
	"pgsql-hackers@lists.postgresql.org" <pgsql-hackers@lists.postgresql.org>
Subject: Re: [EXTERNAL] Re: [PATCH] Support using "all" for the db user in
 pg_ident.conf
Message-ID: <Y76YEHolPL4LIAtO@paquier.xyz>
References: <DBBPR83MB0507FEC2E8965012990A80D0F7FC9@DBBPR83MB0507.EURPRD83.prod.outlook.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="1EhRRPv7h2Tmgg94"
Content-Disposition: inline
In-Reply-To: <DBBPR83MB0507FEC2E8965012990A80D0F7FC9@DBBPR83MB0507.EURPRD83.prod.outlook.com>
Archived-At: <https://www.postgresql.org/message-id/Y76YEHolPL4LIAtO%40paquier.xyz>
Precedence: bulk


--1EhRRPv7h2Tmgg94
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jan 11, 2023 at 09:04:56AM +0000, Jelte Fennema wrote:
> It's very different. I think easiest is to explain by example:
>=20
> If there exist three users on the postgres server: admin, jelte and micha=
el
>=20
> Then this rule (your suggested rule):
> mapname /^(.*)$ \1
>=20
> Is equivalent to:
> mapname admin admin
> mapname jelte jelte
> mapname michael michael
>=20
> While with the "all" keyword you can create a rule like this:
> mapname admin all
>=20
> which is equivalent to:
> mapname admin admin
> mapname admin jelte
> mapname admin michael

Thanks for the explanation, I was missing your point.  Hmm.  On top
of my mind, couldn't we also use a regexp for the pg-role rather than
just a hardcoded keyword here then, so as it would be possible to
allow a mapping to pass for a group of role names?  "all" is just a
pattern to allow everything, at the end.
--
Michael

--1EhRRPv7h2Tmgg94
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=nz+k
-----END PGP SIGNATURE-----

--1EhRRPv7h2Tmgg94--