Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE - Mailing list pgsql-general

From Tom Lane
Subject Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Date
Msg-id 1214992.1720473388@sss.pgh.pa.us
Whole thread Raw
In response to Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE  (Pavel Luzanov <p.luzanov@postgrespro.ru>)
Responses Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
List pgsql-general
Pavel Luzanov <p.luzanov@postgrespro.ru> writes:
> On 08.07.2024 22:22, Christophe Pettus wrote:
>> This is more curiosity than anything else.  In the v16 role system, is there actually any reason to grant membership
ina role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE?  Does the role granted membership
gainany ability it didn't have before in that case? 

> Looks like there is one ability.
> Authentication in pg_hba.conf "USER" field via +role syntax.

Hmm, if that check doesn't require INHERIT TRUE I'd say it's
a bug.

            regards, tom lane



pgsql-general by date:

Previous
From: Pavel Luzanov
Date:
Subject: Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Next
From: Pavel Luzanov
Date:
Subject: Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE