Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sRd2z-00HBHq-FU for pgsql-hackers@arkaria.postgresql.org; Wed, 10 Jul 2024 19:32:13 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1sRd2y-008PdD-5K for pgsql-hackers@arkaria.postgresql.org; Wed, 10 Jul 2024 19:32:12 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sRd2x-008Pd5-Rw for pgsql-hackers@lists.postgresql.org; Wed, 10 Jul 2024 19:32:11 +0000 Received: from mail-il1-x136.google.com ([2607:f8b0:4864:20::136]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1sRd2v-001Q7U-Fh for pgsql-hackers@lists.postgresql.org; Wed, 10 Jul 2024 19:32:10 +0000 Received: by mail-il1-x136.google.com with SMTP id e9e14a558f8ab-381f24d6bc4so374785ab.2 for ; Wed, 10 Jul 2024 12:32:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1720639929; x=1721244729; darn=lists.postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=5/VDyoZEf8ELhz2cfJtinIaurWdtCVQII+CQxO1ZeQw=; b=NWHJUnjXPv3SBW9OoJJl4do2c9dF1PjEpTuS/Ssn98/dx/A39PQXwlq4oiabqsDM1O H0XyYIBi4DFPSI/wp2N+xaQsLBJhroonR1e8sVjKwQXxC41w9tK8jHti0MpA3UUT0eHj AqRWOSKSpOefaCnISTFduwTvkGcqhm77TpmFKxGZ8ij1+2n3HkYF9DxNqQprsHBof/7j yieh+tRrG1xG32C44GR6VZYfxgdlm1GKF2N11c92AXVFa/QCH6RKwnS1zF0NoN3tXIyE BYpjxRyscOBq0xd+Nd/u3VbcDsjfrQrVXbV+/n4fxiD8y5E2COIHTFzJXK8d5dt2B0QZ NoWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1720639929; x=1721244729; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=5/VDyoZEf8ELhz2cfJtinIaurWdtCVQII+CQxO1ZeQw=; b=aSxHoTy88WxwezO+9dEWNL7RjKU6imETiJjyX7R2KdZ9vRWd6Gy+n//au9ZnJoaRtD AkOST0N1XcKqhDZ6zjXiq2z7Yl7hKk83ha0YYsTuCzi7vA//l8wxIMbnqzbfyMvkP6LO qxHZ/VsRDrkTEuUiTOZV5NCkz4hGOfAdkKsscNztwcvUFWdzhyhMfMxzeqEQgWVHTg69 IBrUzFFfMJLPhslLyd0M1PnOdfJ0qTCBQmENAq4no8X+sGT80nHJ9aBJ6KEIxPP3QyTR Ga+JRqk+7oi/cLyKIVoDFuaRjUmjiVshzfcJ9eeRA97UptMDNili5M/02XqOQ0gnCn0h SqCg== X-Forwarded-Encrypted: i=1; AJvYcCVtsh6stiKy7sSr1eqqIrbz9Ug6wjGjp08OuqKy+jSTLxncUV38PqUCUOHDQ1sKq104qeYjg55y7kgpZy4/14nYdS5LeXaFa6Bbtl8msXRPjhMo X-Gm-Message-State: AOJu0YyqVTAWyF2oYINhqaiNG/aTmBV9fuODY4MoUuiUPW3rcDnbIIsT 7iR1i3gcXJz1Fy11btOtkEi/kaD+qLJsVSC2FiTcznjen6kTCuE1 X-Google-Smtp-Source: AGHT+IFETmkEYdaAxve+z+ZnyeLFtS5vE86oRS9HCEdzNqo7czMPo1cnVVUfayj3NEmXl0zl/bbNTQ== X-Received: by 2002:a05:6e02:1a47:b0:374:99bb:8b30 with SMTP id e9e14a558f8ab-38a5910a9d0mr70426085ab.32.1720639928717; Wed, 10 Jul 2024 12:32:08 -0700 (PDT) Received: from nathan (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id e9e14a558f8ab-38a4b87021asm11173475ab.54.2024.07.10.12.32.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jul 2024 12:32:08 -0700 (PDT) Date: Wed, 10 Jul 2024 14:32:06 -0500 From: Nathan Bossart To: Jeff Davis Cc: Fujii Masao , PostgreSQL Developers Subject: Re: pg_maintain and USAGE privilege on schema Message-ID: References: <56596b81-088f-4c0c-9a88-b5f27a7a62e9@oss.nttdata.com> <3f4c6e5ce54d8871ab915dc4f5c270a940f628d6.camel@j-davis.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3f4c6e5ce54d8871ab915dc4f5c270a940f628d6.camel@j-davis.com> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, Jul 10, 2024 at 12:29:00PM -0700, Jeff Davis wrote: >> > It might be reasonable to give implicit USAGE privileges on all >> > schemas >> > during maintenance commands to pg_maintain roles. > > That's an even more specific exception: having USAGE only in the > context of a maintenance command. I think that's a new concept, right? AFAIK yes. -- nathan