Content-Type: multipart/alternative;
 boundary="------------Dwuo29ZepovtbNr2mbDuIgHF"
Message-ID: <c4152e51-6af8-3ca0-5834-4f3fcc4342cd@postgrespro.ru>
Date: Tue, 24 Jan 2023 00:07:58 +0300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.4.2
Subject: Re: v16 GRANT role TO role needs a multi-option setting capability
Content-Language: en-US
To: "David G. Johnston" <david.g.johnston@gmail.com>,
 PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
References: <CAKFQuwa0GiMv7+e28An4f_X9E_r5_U1xOy+BK2SLv=6dKh=C4Q@mail.gmail.com>
From: Pavel Luzanov <p.luzanov@postgrespro.ru>
In-Reply-To: <CAKFQuwa0GiMv7+e28An4f_X9E_r5_U1xOy+BK2SLv=6dKh=C4Q@mail.gmail.com>
Archived-At: <https://www.postgresql.org/message-id/c4152e51-6af8-3ca0-5834-4f3fcc4342cd%40postgrespro.ru>
Precedence: bulk

This is a multi-part message in MIME format.
--------------Dwuo29ZepovtbNr2mbDuIgHF
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

On 23.01.2023 23:09, David G. Johnston wrote:
> GRANT role_name [, ...] TO role_specification [, ...]
>     [ WITH { ADMIN | INHERIT | SET } { OPTION | TRUE | FALSE } ]
>     [ GRANTED BY role_specification ]
>
> It would be really nice to complete this new feature of INHERIT/SET 
> FALSE/TRUE with a multi-specification capability.

If I understand properly, the multi-specification capability is 
supported in the form:

GRANT admin1, admin2 TO usr1, usr2
WITH ADMIN OPTION, SET FALSE, INHERIT TRUE;

But this doesn't seem to be reflected correctly in the documentation.
If I'm not mistaken, the current spec should be like this:

GRANT role_name [, ...] TO role_specification [, ...]
     [ WITH [ { ADMIN | INHERIT | SET } { OPTION | TRUE | FALSE } ] [, 
...] ]
     [ GRANTED BY role_specification ]

By the way, there is suggestion to add role's membership options to the 
\du+ command.[1]

[1]https://www.postgresql.org/message-id/flat/b9be2d0e-a9bc-0a30-492f-a4f68e4f7740@postgrespro.ru

-- 
Pavel Luzanov

--------------Dwuo29ZepovtbNr2mbDuIgHF
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <tt>On 23.01.2023 23:09, David G. Johnston wrote:</tt><br>
    <blockquote type="cite"
cite="mid:CAKFQuwa0GiMv7+e28An4f_X9E_r5_U1xOy+BK2SLv=6dKh=C4Q@mail.gmail.com">
      <div dir="ltr">
        <div class="gmail_default"><tt>GRANT role_name [, ...] TO
            role_specification [, ...]</tt><tt><br>
          </tt><tt>    [ WITH { ADMIN | INHERIT | SET } { OPTION | TRUE
            | FALSE } ]</tt><tt><br>
          </tt><tt>    [ GRANTED BY role_specification ]</tt><tt><br>
          </tt></div>
        <div class="gmail_default"><tt><br>
          </tt></div>
        <div class="gmail_default"><tt>It would be really nice to
            complete this new feature of INHERIT/SET FALSE/TRUE with a
            multi-specification capability.</tt></div>
      </div>
    </blockquote>
    <tt><br>
    </tt><tt>If I understand properly, the multi-specification
      capability is supported in the form:</tt><tt><br>
    </tt><tt><br>
    </tt><tt>GRANT admin1, admin2 TO usr1, usr2 </tt><tt><br>
    </tt><tt>WITH ADMIN OPTION, SET FALSE, INHERIT TRUE;</tt><tt><br>
    </tt><tt><br>
    </tt><tt>But this doesn't seem to be reflected correctly in the
      documentation.</tt><tt><br>
    </tt><tt>If I'm not mistaken, the current spec should be like this:</tt><tt><br>
    </tt><tt><br>
    </tt><tt>GRANT role_name [, ...] TO role_specification [, ...]</tt><tt><br>
    </tt><tt>    [ WITH [ { ADMIN | INHERIT | SET } { OPTION | TRUE |
      FALSE } ] [, ...] ]</tt><tt><br>
    </tt><tt>    [ GRANTED BY role_specification ]</tt><tt><br>
    </tt><tt></tt><tt><br>
    </tt><tt>By the way, there is suggestion to add role's membership
      options to the \du+ command.[1]</tt><tt><br>
    </tt><tt><br>
    </tt><tt>[1]<a class="moz-txt-link-freetext" href="https://www.postgresql.org/message-id/flat/b9be2d0e-a9bc-0a30-492f-a4f68e4f7740@postgrespro.ru">https://www.postgresql.org/message-id/flat/b9be2d0e-a9bc-0a30-492f-a4f68e4f7740@postgrespro.ru</a></tt><tt><br>
    </tt>
    <pre class="moz-signature" cols="72">-- 
Pavel Luzanov
</pre>
  </body>
</html>

--------------Dwuo29ZepovtbNr2mbDuIgHF--