Re: Granting control of SUSET gucs to non-superusers - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Granting control of SUSET gucs to non-superusers
Date
Msg-id 3836367.1620067684@sss.pgh.pa.us
Whole thread Raw
In response to Re: Granting control of SUSET gucs to non-superusers  (Stephen Frost <sfrost@snowman.net>)
Responses Re: Granting control of SUSET gucs to non-superusers  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> One thing that seems missing from this discussion and is part of what
> paused my effort on the 'admin' role proposed towards the end of the
> last cycle is that we really need to consider how this all plays with
> ALTER SYSTEM and not just SUSET GUCs but also other (eg: POSTMASTER,
> SIGHUP) GUCs.

Yeah, I'd meant to bring that up too.  The ability to use ALTER
SYSTEM freely is probably a much bigger use-case than messing with
SUSET variables within one's own session.

I'm still of the opinion that slicing and dicing this at the per-GUC
level is a huge waste of effort.  Just invent one role that lets
grantees set any GUC, document it as being superuser-equivalent,
and be done.

            regards, tom lane



pgsql-hackers by date:

Previous
From: Peter Geoghegan
Date:
Subject: Re: MaxOffsetNumber for Table AMs
Next
From: Robert Haas
Date:
Subject: Re: Granting control of SUSET gucs to non-superusers