Re: almost-super-user problems that we haven't fixed yet - Mailing list pgsql-hackers

From Nathan Bossart
Subject Re: almost-super-user problems that we haven't fixed yet
Date
Msg-id 20230116223728.GA2714038@nathanxps13
Whole thread Raw
In response to almost-super-user problems that we haven't fixed yet  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: almost-super-user problems that we haven't fixed yet
List pgsql-hackers
On Mon, Jan 16, 2023 at 02:29:56PM -0500, Robert Haas wrote:
> 4. You can reserve a small number of connections for the superuser
> with superuser_reserved_connections, but there's no way to do a
> similar thing for any other user. As mentioned above, a CREATEROLE
> user could set connection limits for every created role such that the
> sum of those limits is less than max_connections by some margin, but
> that restricts each of those roles individually, not all of them in
> the aggregate. Maybe we could address this by inventing a new GUC
> reserved_connections and a predefined role
> pg_use_reserved_connections.

I've written something like this before, and I'd be happy to put together a
patch if there is interest.

-- 
Nathan Bossart
Amazon Web Services: https://aws.amazon.com



pgsql-hackers by date:

Previous
From: Thomas Munro
Date:
Subject: Re: BF animal malleefowl reported an failure in 001_password.pl
Next
From: Nathan Bossart
Date:
Subject: Re: recovery modules