Re: allow specifying direct role membership in pg_hba.conf - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: allow specifying direct role membership in pg_hba.conf
Date
Msg-id 20210514190001.GL20766@tamriel.snowman.net
Whole thread Raw
In response to Re: allow specifying direct role membership in pg_hba.conf  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Greetings,

* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Andrew Dunstan <andrew@dunslane.net> writes:
> > On 5/13/21 7:38 PM, Bossart, Nathan wrote:
> >> I've attached a small patch that allows specifying only direct members
> >> of a group in pg_hba.conf.
>
> > Do we really want to be creating two classes of role membership?
>
> Yeah, this seems to be going against the clear meaning of the
> SQL spec.  I realize you can argue that pg_hba.conf doesn't have
> to follow the spec, but it doesn't seem like a terribly good idea
> to interpret role membership differently in different places.

Agreed.

The lack of any particular justifcation for wanting this isn't a useful
way to propose a patch either.

Thanks,

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: allow specifying direct role membership in pg_hba.conf
Next
From: Tom Lane
Date:
Subject: Re: allow specifying direct role membership in pg_hba.conf