On 10/18/23 09:26, David G. Johnston wrote:
On Wednesday, October 18, 2023, Daniel Westermann <daniel.westermann@dbi-services.com> wrote:
"After |SET ROLE|, permissions checking for SQL commands is carried out as though the named role were the one that had logged in originally."
Isn't it the other way around and permission checking is done as "a", or do I read this wrong?
It is saying “a” is the current_user:
When you set role to (named role) a the system behaves as if (named role) a had logged in originally (even though, in that example, postgres is the role that originally logged in)
David J.
Thank you, this is what I see in the small example. Maybe it is my English, but this sentence sounds confusing.
Regards
Daniel