On 20.05.2021 21:10, Tom Lane wrote:
> Pavel Luzanov <p.luzanov@postgrespro.ru> writes:
>> So, is it correct to change description of pg_monitor role from:
>> "Read/execute various monitoring views and functions. This role is a member
of|pg_read_all_settings|,|pg_read_all_stats| and|pg_stat_scan_tables|."
>> to
>> "Read/execute various monitoring views and functions. The roles pg_read_all_settings, pg_read_all_stats and
pg_stat_scan_tablesare members of this role."
> No, it is not. That wording implies that the built-in grants are like
>
> GRANT pg_monitor TO pg_read_all_settings
>
> and so on, where the truth is the opposite.
I'm totally confused. I'm taking timeout to think about it.
--
Pavel Luzanov
Postgres Professional: https://postgrespro.com
The Russian Postgres Company