Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
Дата
Msg-id CA+Tgmobth+RTi9kO0ejmozbUx9kjN9z_Z-Uo1qvB1RTSMLEt5g@mail.gmail.com
обсуждение исходный текст
Ответ на Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER  (Joe Conway <mail@joeconway.com>)
Список pgsql-hackers
On Fri, Jul 22, 2022 at 1:21 PM Joe Conway <mail@joeconway.com> wrote:
> My strategy has been to ensure no other roles are members of the
> bootstrap superuser role, and then alter the bootstrap user to be
> NOLOGIN. E.g. in the example here:

Yeah, making the bootstrap role NOLOGIN seems more reasonable than
making it NOSUPERUSER, at least to me.

-- 
Robert Haas
EDB: http://www.enterprisedb.com



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: make -C libpq check fails obscurely if tap tests are disabled
Следующее
От: Cary Huang
Дата:
Сообщение: Re: Add last failed connection error message to pg_stat_wal_receiver