Today's Postgres Releases break login roles

Поиск
Список
Период
Сортировка
От Etienne LAFARGE
Тема Today's Postgres Releases break login roles
Дата
Msg-id CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
обсуждение исходный текст
Ответы Re: Today's Postgres Releases break login roles
Re: Today's Postgres Releases break login roles
Список pgsql-bugs
Hello,

Today, when upgrading from Postgres 15.8 to 15.9, we realized that the login role set for a user (with ALTER USER my_user SET ROLE my_role) was not automatically set upon login any more.

This is particularly problematic for users of HashiCorp Vault's dynamic users (like us), who often rely on ALTER ROLE xxx SET ROLE yyy to make sure that dynamic & short-lived users created by vault create postgres resources as a long-lived role, and not as themselves.

We suspect this commit to be the one that introduced this behavioral change.

I made a little testbench with docker compose so that the problem can be reproduced easily and quickly (with comprehensive reproduction steps in the README): https://github.com/elafarge/pg_role_bug_reproduction_testbench (feel free to change the 

I'm at your disposal if you have any questions.

Kind Regards,

-Étienne

В списке pgsql-bugs по дате отправления: