Re: [HACKERS] Superowners - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: [HACKERS] Superowners
Date
Msg-id 20170130004445.GQ9812@tamriel.snowman.net
Whole thread Raw
In response to Re: [HACKERS] Superowners  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
Responses Re: [HACKERS] Superowners  (Jim Nasby <Jim.Nasby@BlueTreble.com>)
Re: [HACKERS] Superowners  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
List pgsql-hackers
* Peter Eisentraut (peter.eisentraut@2ndquadrant.com) wrote:
> On 1/26/17 1:25 PM, Simon Riggs wrote:
> > That should include the ability to dump all objects, yet without any
> > security details. And it should allow someone to setup logical
> > replication easily, including both trigger based and new logical
> > replication. And GRANT ON ALL should work.
>
> This basically sounds like a GRANT $privilege ON ALL $objecttype TO
> $user.  So you could have a user that can read everything, for example.
>
> This kind of thing has been asked for many times, but that quieted down
> when the default privileges feature appeared.  I think it would still be
> useful.

Agreed.  I would think we'd either do this with a default role or a role
attribute.

Thanks!

Stephen

pgsql-hackers by date:

Previous
From: Andres Freund
Date:
Subject: Re: [HACKERS] [PATCH] Rename pg_switch_xlog to pg_switch_wal
Next
From: vinayak
Date:
Subject: Re: [HACKERS] Transactions involving multiple postgres foreignservers