Today's Postgres Releases break login roles
| От | Etienne LAFARGE |
|---|---|
| Тема | Today's Postgres Releases break login roles |
| Дата | |
| Msg-id | CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com обсуждение исходный текст |
| Ответы |
Re: Today's Postgres Releases break login roles
Re: Today's Postgres Releases break login roles |
| Список | pgsql-bugs |
Hello,
Today, when upgrading from Postgres 15.8 to 15.9, we realized that the login role set for a user (with ALTER USER my_user SET ROLE my_role) was not automatically set upon login any more.This is particularly problematic for users of HashiCorp Vault's dynamic users (like us), who often rely on ALTER ROLE xxx SET ROLE yyy to make sure that dynamic & short-lived users created by vault create postgres resources as a long-lived role, and not as themselves.
We suspect this commit to be the one that introduced this behavioral change.
I made a little testbench with docker compose so that the problem can be reproduced easily and quickly (with comprehensive reproduction steps in the README): https://github.com/elafarge/pg_role_bug_reproduction_testbench (feel free to change the
I'm at your disposal if you have any questions.
Kind Regards,
-Étienne
В списке pgsql-bugs по дате отправления: