Robert Haas <robertmhaas@gmail.com> writes:
> On Tue, Nov 23, 2010 at 10:29 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> I believe the definition of "in role" we use here is "has the privileges
>> of role". Since kaiting.chen is a superuser, all privilege tests will
>> succeed for him, including that one. IOW, a superuser is automatically
>> a member of every role. This isn't a bug.
> I guess it's not a bug if we did it that way on purpose, but it seems
> like testing for actual group membership would be less surprising.
Then you'd have superusers acting like they were group members for some
purposes and not others. Not sure how that would be less surprising.
regards, tom lane