Re: create database with template doesn't copy database ACL - Mailing list pgsql-hackers

From Tom Lane
Subject Re: create database with template doesn't copy database ACL
Date
Msg-id 1092722.1592191496@sss.pgh.pa.us
Whole thread Raw
In response to Re: create database with template doesn't copy database ACL  (Bruce Momjian <bruce@momjian.us>)
Responses Re: create database with template doesn't copy database ACL  (Bruce Momjian <bruce@momjian.us>)
List pgsql-hackers
Bruce Momjian <bruce@momjian.us> writes:
> I am unclear if we should be copying the CONNECT and TEMPORARY
> attributes or documenting that CREATE DATABASE does not copy them.

We should absolutely not copy them.

As an example, it'd make sense for an admin to revoke CONNECT on a
template database, just to help ensure that nobody modifies it.
If that propagated to every created database, it would be a complete
fail.

Moreover, since the ACLs of an object depend quite a bit on who the owner
is, it'd make no sense to copy them to a new object that has a different
owner.  The granted-by fields would be wrong, if nothing else.

In practice, CREATE DATABASE never has copied any database-level property
of the template DB, only its contents.  (Well, I guess it copies encoding
and collation by default, but those are descriptive of the contents.)

            regards, tom lane



pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: create database with template doesn't copy database ACL
Next
From: Bruce Momjian
Date:
Subject: Re: create database with template doesn't copy database ACL