Re: Granting control of SUSET gucs to non-superusers

Stephen Frost <sfrost@snowman.net> writes:
> One thing that seems missing from this discussion and is part of what
> paused my effort on the 'admin' role proposed towards the end of the
> last cycle is that we really need to consider how this all plays with
> ALTER SYSTEM and not just SUSET GUCs but also other (eg: POSTMASTER,
> SIGHUP) GUCs.

Yeah, I'd meant to bring that up too.  The ability to use ALTER
SYSTEM freely is probably a much bigger use-case than messing with
SUSET variables within one's own session.

I'm still of the opinion that slicing and dicing this at the per-GUC
level is a huge waste of effort.  Just invent one role that lets
grantees set any GUC, document it as being superuser-equivalent,
and be done.

            regards, tom lane