Re: privilege shedding - Mailing list pgsql-admin

From Kevin Grittner
Subject Re: privilege shedding
Date
Msg-id 48AD30F8.EE98.0025.0@wicourts.gov
Whole thread Raw
In response to privilege shedding  (dkeeney <dvkeeney@gmail.com>)
List pgsql-admin
>>> dkeeney <dvkeeney@gmail.com> wrote:

> Is there a way to non-reversibly shed privilige within a PostgreSQL
> session?

> I would like the role
> change to persist through the life of the session, without the
option
> of restoring the superuser role.

We could use this in certain circumstances.  How about SET
AUTHORIZATION ROLE as syntax?  (I was trying to find a reserved word
to use where LOCAL and SESSION are now allowed which would have the
right connotations.  I'm entirely happy with this, but it doesn't seem
too bad....)

-Kevin

pgsql-admin by date:

Previous
From: Tom Lane
Date:
Subject: Re: pg_log directory
Next
From: "c k"
Date:
Subject: Query performance difference