Postgres Pro
Downloads
Home   >   mailing lists

Re: Why do i need to install set_user extension if i can directly grant all required privileges to user? - Mailing list pgsql-admin

From Holger Jakobs
Subject Re: Why do i need to install set_user extension if i can directly grant all required privileges to user?
Date
Msg-id 44912597-d81a-aece-2222-5a2e116dc0e1@jakobs.com
Whole thread Raw
In response to Re: Why do i need to install set_user extension if i can directly grant all required privileges to user?  (Erik Wienhold <ewie@ewie.name>)
Responses Re: Why do i need to install set_user extension if i can directly grant all required privileges to user?
List pgsql-admin
Tree view
Am 21.06.23 um 15:33 schrieb Erik Wienhold:

Changing roles is already possible in Postgres.  You must be a member of the
target role or be a superuser in order to change roles.

This is going to change in detail as of version 16 of PostgreSQL. You may determine whether a role switch is allowed or not.

Excerpt from https://www.postgresql.org/docs/16/sql-grant.html:

"The SET option, if it is set to TRUE, allows the member to change to the granted role using the SET ROLE command. If a role is an indirect member of another role, it can use SET ROLE to change to that role only if there is a chain of grants each of which has SET TRUE. This option defaults to TRUE."



-- 
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
Attachment

pgsql-admin by date:

Previous
From: Sean O'Grady
Date:
Subject: Re: Question about wal_compression and what to expect
Next
From: Scott Ribe
Date:
Subject: Re: Question about wal_compression and what to expect