Re: Special role for subscriptions - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Special role for subscriptions
Date
Msg-id 20181103162049.GV4184@tamriel.snowman.net
Whole thread Raw
In response to Special role for subscriptions  (Evgeniy Efimkin <efimkin@yandex-team.ru>)
Responses Re: Special role for subscriptions  (Evgeniy Efimkin <efimkin@yandex-team.ru>)
List pgsql-hackers
Greetings,

* Evgeniy Efimkin (efimkin@yandex-team.ru) wrote:
> In postgresql 10 and 11 only superuser can create/alter subscriptions.
> If there was a special role (like pg_monitor), it would be more easy to grant control on subscriptions.
> I can make a patch if there are no objections against it.

I think the short answer is 'yes, we should let non-superusers do that',
but the longer answer is:

What level of access makes sense for managing subscriptions?  Should
there be a way to say "user X is allowed to create a subscription for
remote system Y, but only for tables that exist in schema Q"?

My general feeling is 'yes', though, of course, I don't want to say that
we have to have all of that before we move forward with allowing
non-superusers to create subscriptions, but I do think we want to make
sure that we have a well thought-out path for how to get from where we
are now to a system which has a lot more granularity, and to do our best
to try avoiding any paths that might paint us into a corner.

Thanks!

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Pavel Raiskup
Date:
Subject: plruby: rb_iterate symbol clash with libruby.so
Next
From: Alvaro Herrera
Date:
Subject: Re: partitioned indexes and tablespaces