From etienne.decherf-ext@aphp.fr Mon Nov 5 11:15:08 2018 Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJcsq-0005IO-UG for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 11:17:29 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gJcqi-0003C2-C5 for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 11:15:16 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJcqi-0003B2-5Q for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 11:15:16 +0000 Received: from pasteur.ap-hop-paris.fr ([164.2.249.240]) by magus.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gJcqf-0004TG-00 for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 11:15:14 +0000 Received: from BBS-EXCHUB-P001.wprod.ds.aphp.fr (poolhubbbs1.bbs.aphp.fr [10.172.143.13]) by pasteur.ap-hop-paris.fr (Postfix) with SMTP id 579313003 for ; Mon, 5 Nov 2018 12:15:09 +0100 (CET) Received: from BBS-EXCMBX-P005.wprod.ds.aphp.fr ([fe80::61f0:5cf4:9934:b6de]) by BBS-EXCHUB-P001.wprod.ds.aphp.fr ([fe80::188b:93d9:a398:c708%14]) with mapi id 14.03.0408.000; Mon, 5 Nov 2018 12:15:09 +0100 From: =?iso-8859-1?Q?DECHERF_=C9tienne?= To: "pgsql-sql@lists.postgresql.org" Subject: multiple roles for a user ? Thread-Topic: multiple roles for a user ? Thread-Index: AQHUdPiInfIFBSBllEOvthDTgcbuiw== Date: Mon, 5 Nov 2018 11:15:08 +0000 Message-ID: <35B45AE5854FD442A1775EB1337F9701C937BE@BBS-EXCMBX-P005.wprod.ds.aphp.fr> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.172.158.3] Content-Type: multipart/alternative; boundary="_000_35B45AE5854FD442A1775EB1337F9701C937BEBBSEXCMBXP005wpro_" MIME-Version: 1.0 X-AP-HP-MailScanner-Information: Please contact the ISP for more information X-AP-HP-MailScanner-ID: 579313003.AA8C6 X-AP-HP-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details X-AP-HP-MailScanner-From: etienne.decherf-ext@aphp.fr X-Spam-Status: No List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --_000_35B45AE5854FD442A1775EB1337F9701C937BEBBSEXCMBXP005wpro_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I have a simple question to ask : Is it possible to give multiple roles to the same user? for example : 1. a general role "RoleA" for most users, for "grants and revokes" on certa= in tables and certain columns. 2. plus a role "Role_user" particular for each of them for its additional p= ersonal access with "grants" and "revokes" on other tables and columns. Thanks. Regards. Etienne DECHERF SOPRA STERIA for APHP Paris --_000_35B45AE5854FD442A1775EB1337F9701C937BEBBSEXCMBXP005wpro_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello,
I have a simple question to ask :
Is it possible to give multiple roles to t=
he same user?=0A=
=0A=
for example :
1. a general role "RoleA" for most users, for &q=
uot;grants and revokes" on certain tables and certain columns.=0A=
=0A=
2. plus a role "Role_user" particular for each of them for its ad=
ditional personal access
 with "grants" and "revokes=
" on other tables and columns.

Thanks.
Regards.
Etienne DECHERF
SOPRA STERIA
for APHP Paris
--_000_35B45AE5854FD442A1775EB1337F9701C937BEBBSEXCMBXP005wpro_-- From sschmidt@rgllogistics.com Mon Nov 5 13:03:03 2018 Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJeXj-0003R1-4J for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 13:03:47 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gJeXh-00085V-Id for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 13:03:45 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJeXh-00081d-85 for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 13:03:45 +0000 Received: from mx0b-0021dc01.pphosted.com ([148.163.152.220] helo=mx0a-0021dc01.pphosted.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJeXY-0001Qh-1n for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 13:03:43 +0000 Received: from pps.filterd (m0096563.ppops.net [127.0.0.1]) by mx0b-0021dc01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id wA5D24WI002937; Mon, 5 Nov 2018 07:03:32 -0600 Received: from mail.rglholdings.com (dns152.b.register.com [98.102.82.53] (may be forged)) by mx0b-0021dc01.pphosted.com with ESMTP id 2nh5tfrm8j-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 05 Nov 2018 07:03:32 -0600 Received: from mail.rglholdings.com (localhost [127.0.0.1]) by mail.rglholdings.com (Postfix) with ESMTPS id A724914B13; Mon, 5 Nov 2018 07:03:04 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by mail.rglholdings.com (Postfix) with ESMTP id 97BA314ACC; Mon, 5 Nov 2018 07:03:04 -0600 (CST) X-Virus-Scanned: amavisd-new at rglholdings.com Received: from mail.rglholdings.com ([127.0.0.1]) by localhost (mail.rglholdings.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id B2WJbso4URKn; Mon, 5 Nov 2018 07:03:04 -0600 (CST) Received: from mail.rglholdings.com (mail.ipa.rglholdings.com [10.1.20.35]) by mail.rglholdings.com (Postfix) with ESMTP id 78F5814A16; Mon, 5 Nov 2018 07:03:04 -0600 (CST) Date: Mon, 5 Nov 2018 07:03:03 -0600 (CST) From: Stanton Schmidt To: DECHERF =?utf-8?Q?=C3=89tienne?= Cc: pgsql-sql Message-ID: <872659542.9918682.1541422983710.JavaMail.zimbra@rglholdings.com> In-Reply-To: <35B45AE5854FD442A1775EB1337F9701C937BE@BBS-EXCMBX-P005.wprod.ds.aphp.fr> References: <35B45AE5854FD442A1775EB1337F9701C937BE@BBS-EXCMBX-P005.wprod.ds.aphp.fr> Subject: Re: multiple roles for a user ? MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_ea28b0ea-e56d-42b1-a657-fdfd7371991a" X-Originating-IP: [10.1.20.35] X-Mailer: Zimbra 8.7.11_GA_3012 (ZimbraWebClient - GC70 (Win)/8.7.11_GA_3012) Thread-Topic: multiple roles for a user ? Thread-Index: AQHUdPiInfIFBSBllEOvthDTgcbui7AE0u+h X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2018-11-05_08:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 suspectscore=9 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 lowpriorityscore=0 mlxlogscore=562 adultscore=7 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1811050121 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --=_ea28b0ea-e56d-42b1-a657-fdfd7371991a Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Yes it is.=20 stanton schmidt=20 Database Administrator=20 direct. [ callto:920.884.1281 | 920. ] 471.4495 cell 920.660.1828=20 RGL=20 GO AHEAD. ASK WHAT IF.=20 [ http://www.rgllogistics.com/ | www.RGLlogistics.co m ]=20 From: "DECHERF =C3=89tienne" =20 To: "pgsql-sql" =20 Sent: Monday, November 5, 2018 5:15:08 AM=20 Subject: multiple roles for a user ?=20 Hello,=20 I have a simple question to ask :=20 Is it possible to give multiple roles to the same user? for example :=20 1. a general role "RoleA" for most users, for "grants and revokes" on certa= in tables and certain columns. 2. plus a role "Role_user" particular for each of them for its additional p= ersonal access=20 with "grants" and "revokes" on other tables and columns .=20 Thanks.=20 Regards.=20 Etienne DECHERF=20 SOPRA STERIA=20 for APHP Paris=20 --=_ea28b0ea-e56d-42b1-a657-fdfd7371991a Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Yes it is.
stanton = schmidt
Database Administrator
direct. 920.471.4495 &n= bsp;cell 920.660.1828
<= br>RGL
GO AHEAD. ASK = WHAT IF.
www.RGLlogistics.co m

From: "DECHERF =C3=89tienne" <etienne.decherf-ext@aphp.fr>
To: "pgsql-sql" <pgsql-sql@lists.postgresql.org>
Sent: Monday, November 5, 2018 5:15:08 AM
Subject: multiple roles for = a user ?

Hello,
I have a simple question to ask :
Is it possible to give multiple roles to the same use=
r?

for example :
1. a general role "RoleA" for most users, for "grants and =
revokes" on certain tables and certain columns.

2. plus a role "Role_user" particular for each of them for its additional p=
ersonal access
 with "grants" and "revokes" on other tables and col=
umns.

Thanks.
Regards.

Etienne DECHERF
SOPRA STE=
RIA
for APHP Paris

--=_ea28b0ea-e56d-42b1-a657-fdfd7371991a-- From guillaume@lelarge.info Mon Nov 5 13:25:12 2018 Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJesn-0004Qn-BH for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 13:25:33 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gJesk-0001gW-8y for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 13:25:30 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJesj-0001fr-PJ for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 13:25:30 +0000 Received: from mail-ot1-x32d.google.com ([2607:f8b0:4864:20::32d]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gJesf-0001sV-Ml for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 13:25:28 +0000 Received: by mail-ot1-x32d.google.com with SMTP id g27so7905475oth.6 for ; Mon, 05 Nov 2018 05:25:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lelarge-info.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Mi4XwfaIsq+Yc1fA1Qh/aJJtsesYWDAwAG/YYh4nOpg=; b=CwLfVvLQhUGlaaWGTmaKdZIVI+LjSDh0JcB1TtTkyTkGIEYknptmBCs6NTDli9bqKO Yn/9D/BP9yo+od/WlKpYVZh3kgSWTCRw5dwaDWmqhD8EtWggPdfd4qxlrBRfeD8xX6Ol +HpSnq4n2wpbaOPJBuLCIKkpD9Pb5pGB2p1XaZz6yc5j2Ci4Qy4Af0k0AOH89JyYWRuf BqJv5tls2gEDkGOqvEWu7HWaE5fKyBuMXetBFOXMAH84VxfNDslXPD1p0c6TjBJYiE7q ZNiA3T80B+rZ3ikO/YSHGS+nFoi1bMOUoD9pp5SpVTUke4nzFz9P4KPyGQxdSj/iJcao U9xA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Mi4XwfaIsq+Yc1fA1Qh/aJJtsesYWDAwAG/YYh4nOpg=; b=YizG828f7ZbaiSlnh+riQVeQ21i1RBkZl2UclHMeFNkvyQpdbw+B/u+2Rp+F05kZQ6 OvosNSz1/ZGDewUDpWAKFty8vPMklS6VUfWLjMcCDtzJKlOhb6rwWttXk2cB8+vTIzbp FRXTnzZrvu+ROzNkhsWg80cjfCs96sLXOhhzzeUv6jWV9izKiDjzF0iQtceVY9qU4tm3 z6C/W2g0V6DhF6v1BXQ+y0FGoA5KWEfMgMHk8WnO2A6jQZw7RE5szLjo2mvxy8FHpqPa bD7Qfv+WZQmRRRhLIjwzKxIwTh0Ze7qSYY1age2/OHPzn+dFrP7jY65u2Lh66x4q/SOe QoSg== X-Gm-Message-State: AGRZ1gIHvxhbRIDK7Y8QObhE56CEZFbU5FZHuTWQyS2Y6lJDG/UMJWih 6I5zb8gq5XwAVFRBaE/w+yUeuINLAQyMoJio/8P+bw== X-Google-Smtp-Source: AJdET5dcJ5s2C4Hh2bD8B/4RvmWzz+dOjnLbn7Vn6ED+kvNk+19kT+6ElXPU/0OJvJL1QY7IJAYdmVNCEVj/ROmdRzc= X-Received: by 2002:a9d:28b0:: with SMTP id s45mr13972125ota.138.1541424324347; Mon, 05 Nov 2018 05:25:24 -0800 (PST) MIME-Version: 1.0 References: <35B45AE5854FD442A1775EB1337F9701C937BE@BBS-EXCMBX-P005.wprod.ds.aphp.fr> In-Reply-To: <35B45AE5854FD442A1775EB1337F9701C937BE@BBS-EXCMBX-P005.wprod.ds.aphp.fr> From: Guillaume Lelarge Date: Mon, 5 Nov 2018 14:25:12 +0100 Message-ID: Subject: Re: multiple roles for a user ? To: etienne.decherf-ext@aphp.fr Cc: pgsql-sql@lists.postgresql.org Content-Type: multipart/alternative; boundary="0000000000004d17d00579ead104" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --0000000000004d17d00579ead104 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Le lun. 5 nov. 2018 =C3=A0 12:15, DECHERF =C3=89tienne a =C3=A9crit : > Hello, > I have a simple question to ask : > > Is it possible to give multiple roles to the same user? > > for example : > 1. a general role "RoleA" for most users, for "grants and revokes" on cer= tain tables and certain columns. > > 2. plus a role "Role_user" particular for each of them for its additional= personal access > with "grants" and "revokes" on other tables and columns. > > Yes, though you can only grant privileges this way. Not revoke some. --=20 Guillaume. --0000000000004d17d00579ead104 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Le=C2=A0lun. 5= nov. 2018 =C3=A0=C2=A012:15, DECHERF =C3=89tienne <etienne.decherf-ext@aphp.fr> a =C3=A9crit= =C2=A0:
Hello,
I have a simple question to ask :
Is it possible to give multiple role=
s to the same user?

for example :
1. a general role "RoleA" for most users, for &q=
uot;grants and revokes" on certain tables and certain columns.

2. plus a role "Role_user" particular for each of them for its ad=
ditional personal access
=C2=A0with "grants" and "revokes=
" on other tables and columns.


Yes, though= you can only grant privileges this way. Not revoke some.


--
Guill= aume.
--0000000000004d17d00579ead104-- From david.g.johnston@gmail.com Mon Nov 5 15:08:45 2018 Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJgV4-0000gM-90 for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 15:09:10 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gJgV2-0007iN-DU for pgsql-sql@arkaria.postgresql.org; Mon, 05 Nov 2018 15:09:08 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1gJgV1-0007hZ-RP for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 15:09:07 +0000 Received: from mail-qk1-x731.google.com ([2607:f8b0:4864:20::731]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gJgUu-0004CQ-Nx for pgsql-sql@lists.postgresql.org; Mon, 05 Nov 2018 15:09:06 +0000 Received: by mail-qk1-x731.google.com with SMTP id d19so15201791qkg.5 for ; Mon, 05 Nov 2018 07:09:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=GsbwSDjFPPd+OQ85bYGnmsXo4PE1b7GSxQx913UQE+4=; b=PUL1lPLL8MUPzmVQ8Z2KTZQo9WAXU3gGMPNjn96omocA5BoERBDmVOhl72x/QeDdgz X59S71HGSWONapgCmaPAwEfJaPO8NTTA2lYJh4Md86vQoMRuPnxgQTlS+PHjK1PP7Fj+ gC+8rMi4pMs0J40BLIkmKxULFsorZmmIFMiGXY1IGCC40WLk+hGlX+OM+QTp6/WYXMf+ znjAymMY6zamkJhu47nj4xoeK4dpi5dfexucMan8acJtDrxC0T3sx8UC+4G/QxwdDKFp XwjUZQov6xCkBF4OkKFZKyHs78+PJbRiBcA5o2hgkTnSVdJ4cM3LQp77PM3Pq/vpqM0L ZaEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=GsbwSDjFPPd+OQ85bYGnmsXo4PE1b7GSxQx913UQE+4=; b=ipWwOY8wlJiiKtL7+xq/ok3pGAN7xNdwvClD4gwT7q+IX9LTu3dVGJBA1aLkyBL72O O44tVsfhMWyXOBe+dA48OLfWvCrqlhDzdrvcgZ7qQDLYIFD/0CTB6ZoKwCk5JPTQbCId ILi1SOXu5mMqANy/nEcPho5EOic55oH0Hg5SL6iTqYiabWdajOP6Bmv/AvUGWZ+o0/q4 p+5uGOWCwCWMNZhEMAbpIgmnv1PcME0/IJPaqX+aDAeVap1mD1/BNUvhifeVqz2Dg0SN IbLdB++bo8Bmy+8H21VM4UipBBH6vb+DCGnNfw3ul3SV8Cjsr/2YzNSIK1u+GszbSQIG 3TOA== X-Gm-Message-State: AGRZ1gLkvogEw+VeA4nepNZUSYrtF3fT0Hf9rSNic4cqoVAjq1NU0NyY Y7ZgtJ14xFD80JTp/j5n2NWc0TY5a5V3Vd9WDoE= X-Google-Smtp-Source: AJdET5c/RnrY2ZM2cVa6HlOc7akZguTA9940qw5eQlkkP/5LBbvSdIOaU8bHoZDPgadANlX/NK96GQ4LGDHxfLIxstE= X-Received: by 2002:a0c:983d:: with SMTP id c58-v6mr22236787qvd.86.1541430539651; Mon, 05 Nov 2018 07:08:59 -0800 (PST) MIME-Version: 1.0 References: <35B45AE5854FD442A1775EB1337F9701C937BE@BBS-EXCMBX-P005.wprod.ds.aphp.fr> In-Reply-To: From: "David G. Johnston" Date: Mon, 5 Nov 2018 08:08:45 -0700 Message-ID: Subject: Re: multiple roles for a user ? To: Guillaume Lelarge Cc: etienne.decherf-ext@aphp.fr, pgsql-sql Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On Mon, Nov 5, 2018 at 6:25 AM Guillaume Lelarge w= rote: > > Le lun. 5 nov. 2018 =C3=A0 12:15, DECHERF =C3=89tienne a =C3=A9crit : >> >> 2. plus a role "Role_user" particular for each of them for its additiona= l personal access >> >> with "grants" and "revokes" on other tables and columns. >> Yes, though you can only grant privileges this way. Not revoke some. Phrased differently, "REVOKE" removes a previously GRANT'd permission; it does not setup a "denial of permission". The permission system in PostgreSQL is purely additive - roles start with zero permissions are strictly granted the ability to do things. You have to revoke permissions where they are granted originally when inheritance is in play. David J.