Re: [PATCHES] Roles - SET ROLE Updated
| От | Tom Lane |
|---|---|
| Тема | Re: [PATCHES] Roles - SET ROLE Updated |
| Дата | |
| Msg-id | 16516.1122396297@sss.pgh.pa.us обсуждение |
| Ответ на | Re: [PATCHES] Roles - SET ROLE Updated (Stephen Frost <sfrost@snowman.net>) |
| Ответы |
Re: [PATCHES] Roles - SET ROLE Updated
|
| Список | pgsql-hackers |
I've committed changes to add a "rolinherit" flag to pg_authid as per
discussion. The pg_has_role function now distinguishes USAGE rights
on a role (do you currently have the privileges of that role) from
MEMBER rights (do you have the ability to SET ROLE to that role).
A couple of loose ends remain:
* Should is_admin_of_role pay attention to rolinherit? I suspect it
should but can't quite face going through the SQL spec again to be sure.
This only affects the right to GRANT role membership to someone else.
* The information_schema needs another pass to see which pg_has_role
usages ought to be testing USAGE instead of MEMBER. I think most of
them should, but in and around applicable_roles and enabled_roles
some more thought and spec-reading is needed.
I'm planning on doing some documentation work next, and was hoping
someone else would look at the above items.
regards, tom lane
В списке pgsql-hackers по дате отправления: