Re: [PATCHES] Users/Groups -> Roles

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: [PATCHES] Users/Groups -> Roles
Дата
Msg-id 11646.1120066820@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: [PATCHES] Users/Groups -> Roles  (Stephen Frost <sfrost@snowman.net>)
Ответы Re: [PATCHES] Users/Groups -> Roles  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
I notice that AddRoleMems/DelRoleMems assume that ADMIN OPTION is not
inherited indirectly; that is it must be granted directly to you.
This seems wrong; SQL99 has under <privileges>
       19) B has the WITH ADMIN OPTION on a role if a role authorization           descriptor identifies the role as
grantedto B WITH ADMIN OPTION           or a role authorization descriptor identifies it as granted WITH
ADMINOPTION to another applicable role for B.
 

and in the Access Rules for <grant role statement>
        1) Every role identified by <role granted> shall be contained           in the applicable roles for A and the
correspondingrole           authorization descriptors shall specify WITH ADMIN OPTION.
 

I can't see any support in the spec for the idea that WITH ADMIN OPTION
doesn't flow through role memberships in the same way as ordinary
membership; can you quote someplace that implies this?
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Douglas McNaught
Дата:
Сообщение: Re: Proposal: associative arrays for plpgsql (concept)
Следующее
От: Kenneth Marshall
Дата:
Сообщение: Re: commit_delay, siblings