Re: Role & User - Inheritance? - Mailing list pgsql-general

From Tom Lane
Subject Re: Role & User - Inheritance?
Date
Msg-id 29737.1174011647@sss.pgh.pa.us
Whole thread Raw
In response to Role & User - Inheritance?  ("Alexi Gen" <sqlcatz@hotmail.com>)
Responses Practical question.  (louis gonzales <gonzales@linuxlouis.net>)
List pgsql-general
"Alexi Gen" <sqlcatz@hotmail.com> writes:
> Since user01 is tagged to dba01 (who has the SUPERUSER option) - should'nt
> user01 also inherit this?

No, he has to actually SET ROLE to the superuser account to make himself
a superuser.  SUPERUSER and the other non-GRANTable attributes of a role
don't inherit through mere membership.  This is partly an implementation
limitation but I happen to think it's a good idea ... superuserness is a
mighty big hammer to be letting loose accidentally.

            regards, tom lane

pgsql-general by date:

Previous
From: "Michael Su"
Date:
Subject: About the new day-time saving rule
Next
From: Randall Smith
Date:
Subject: Re: pre-parser query manipulation