Re: Role membership and DROP - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Role membership and DROP
Date
Msg-id 10546.1573843266@sss.pgh.pa.us
Whole thread Raw
In response to Re: Role membership and DROP  (Laurenz Albe <laurenz.albe@cybertec.at>)
Responses Re: Role membership and DROP  (Laurenz Albe <laurenz.albe@cybertec.at>)
Re: Role membership and DROP  (Laurenz Albe <laurenz.albe@cybertec.at>)
List pgsql-hackers
Laurenz Albe <laurenz.albe@cybertec.at> writes:
> On Wed, 2019-11-13 at 17:17 -0500, Tom Lane wrote:
>> It might be worth clarifying this point in section 5.7,
>> https://www.postgresql.org/docs/devel/ddl-priv.html
>> but let's not duplicate that in every ref/ page.

> I have attached a proposed patch.

   <para>
    The right to modify or destroy an object is always the privilege of
-   the owner only.
+   the owner.  Like all privileges, that right can be inherited by members of
+   the owning role.
   </para>

Hm.  This is more or less contradicting the original meaning of the
existing sentence, so maybe we need to rewrite a bit more.  What do
you think of

    The right to modify or destroy an object is inherent in being the
    object's owner.  Like all privileges, that right can be inherited by
    members of the owning role; but there is no way to grant or revoke
    it more selectively.

A larger problem (pre-existing, since there's a reference to being a
member of the owning role just a bit further down) is that I don't think
we've defined role membership at this point, so the reader is quite
entitled to come away more confused than they were before.  It might not
be advisable to try to cover role membership here, but we should at
least add a cross-reference to where it's explained.

            regards, tom lane



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: could not stat promote trigger file leads to shutdown
Next
From: Robert Haas
Date:
Subject: Re: [HACKERS] pg_shmem_allocations view