Re: use has_privs_of_role() for pg_hba.conf

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: use has_privs_of_role() for pg_hba.conf
Дата
Msg-id 3574712.1665242046@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: use has_privs_of_role() for pg_hba.conf  (Joe Conway <mail@joeconway.com>)
Ответы Re: use has_privs_of_role() for pg_hba.conf  (Robert Haas <robertmhaas@gmail.com>)
Список pgsql-hackers
Joe Conway <mail@joeconway.com> writes:
> Thanks -- looks good to me. If there are no other comments or concerns, 
> I will commit/push by the end of the weekend.

Robert seems to think that this patch might be completely misguided,
so I'm not sure we have real consensus.  I think he may have a point.

An angle that he didn't bring up is that we've had proposals, and
even I think a patch, for inventing database-local privileges.
If that were to become a thing, it would interact very badly with
this idea, because it would often not be clear which set of privileges
to consider.  As long as HBA checks consider membership, and we don't
invent database-local role membership, there's no problem.

            regards, tom lane



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Joe Conway
Дата:
Сообщение: Re: use has_privs_of_role() for pg_hba.conf
Следующее
От: Robert Haas
Дата:
Сообщение: Re: use has_privs_of_role() for pg_hba.conf