Re: Connection limit doesn't work for superuser - Mailing list pgsql-hackers

From Andrey Borodin
Subject Re: Connection limit doesn't work for superuser
Date
Msg-id 47C328D4-8382-4AC4-A7B7-BEF2CB19D6CE@yandex-team.ru
Whole thread Raw
In response to Connection limit doesn't work for superuser  (Evgeniy Efimkin <efimkin@yandex-team.ru>)
Responses Re: Connection limit doesn't work for superuser  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
Hi!

> 7 нояб. 2018 г., в 11:48, Evgeniy Efimkin <efimkin@yandex-team.ru> написал(а):
> It would be nice if ALTER USER ... WITH CONNECTION LIMIT will work for superuser. It would protect against connection
leaks.e.g. we have two superusers, one of them reached connection limit but not max_connections, the other is still
possibleto connect to database and solve the problem. The current behaviour would be the same for the case with
rolconnlimit= -1. Superuser can execute NOLOGIN to another superuser and it works. I found previos discussion about
CONNECTIONLIMIT for superuser but it ended about Slony.
https://www.postgresql.org/message-id/1154351265.22367.210.camel%40coppola.muc.ecircle.de
>

Current docs contain following description for SUPERUSER:
>These clauses determine whether the new role is a “superuser”, who can override all access restrictions within the
database.
Do we consider connection limit "access restriction"? Superuser can avoid setting his connection limit if he do not
needit. 

Best regards, Andrey Borodin.

pgsql-hackers by date:

Previous
From: David Rowley
Date:
Subject: Re: Speeding up INSERTs and UPDATEs to partitioned tables
Next
From: Jesper Pedersen
Date:
Subject: Re: pread() and pwrite()