Re: Additional role attributes && superuser review - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Additional role attributes && superuser review
Date
Msg-id 20151221164143.GV3685@tamriel.snowman.net
Whole thread Raw
In response to Re: Additional role attributes && superuser review  (Michael Paquier <michael.paquier@gmail.com>)
Responses Re: Additional role attributes && superuser review  (Michael Paquier <michael.paquier@gmail.com>)
List pgsql-hackers
Michael, all,

* Michael Paquier (michael.paquier@gmail.com) wrote:
> OK, let's do so then by having this one fall under pg_backup. Let's
> not be my grunting concerns be an obstacle for this patch, and we
> could still change it afterwards in this release beta cycle anyway
> based on user feedback.

Updated and rebased patch attached which takes the 'pg_switch_xlog'
default role back out, leaving us with:

pg_monitor - View privileged info
pg_backup - start/stop backups, switch xlog, create restore points
pg_replay - Pause/resume xlog replay on replicas
pg_replication - Create/destroy/etc replication slots
pg_rotate_logfile - Request logfile rotation
pg_signal_backend - Signal other backends (cancel query/terminate)
pg_file_settings - View configuration settings in all config files

Michael, another review would be great, if you don't mind.  I'm going to
be going through it also more closely since it sounds like we've got
consensus on at least this initial set of default roles and rights.  If
all looks good then I'll commit it.

Thanks!

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Dmitry Igrishin
Date:
Subject: Re: SET SESSION AUTHORIZATION superuser limitation.
Next
From: Uriy Zhuravlev
Date:
Subject: Re: Some questions about the array.