Pavel Luzanov <p.luzanov@postgrespro.ru> writes:
> On 13.07.2023 18:01, Tom Lane wrote:
>> That does not seem right. Is it impossible for pam.set_option
>> to be false? Even if it is, should this code assume that?
> For versions before 16, including one role to another automatically
> gives possibility to issue SET ROLE.
Right, -ENOCAFFEINE.
> IMO, the only question is whether it is correct to show IMPLICIT and
> SET options in versions where they are not actually present
> in pg_auth_members, but can be determined.
Hmm, that's definitely a judgment call. You could argue that it's
useful and consistent, but also that it's confusing to somebody
who's not familiar with the new terminology. On balance I'd lean
to showing them, but I won't fight hard for that viewpoint.
regards, tom lane