Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers)

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers)
Дата
Msg-id CA+TgmoYF6EtxXQ8Z5w=rOHesOs9sG6HHL5ikrbV3hS=KoFG7zQ@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers)  (Isaac Morland <isaac.morland@gmail.com>)
Ответы Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers)
Список pgsql-hackers
Дерево обсуждения 
On Tue, Jul 27, 2021 at 10:24 AM Isaac Morland <isaac.morland@gmail.com> wrote:
> Isn’t this backwards? If all those roles are members of "tenant" then they can do anything "tenant" can do. The
reversemight work - make "tenant" a member of all the related roles - although I haven’t thought through in detail. 

Dang it, yes. The tenant needs to be members of all the other users,
not the other way around. I spent a long time trying to not get that
backwards and still did.

--
Robert Haas
EDB: http://www.enterprisedb.com

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Fujii Masao
Дата:
Сообщение: Re: Fix around conn_duration in pgbench
Следующее
От: Andrew Dunstan
Дата:
Сообщение: Re: Reduce the number of special cases to build contrib modules on windows