Re: Streaming replication as a separate permissions - Mailing list pgsql-hackers

From Josh Berkus
Subject Re: Streaming replication as a separate permissions
Date
Msg-id 4D13C8FC.4030500@agliodbs.com
Whole thread Raw
In response to Re: Streaming replication as a separate permissions  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: Streaming replication as a separate permissions  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On 12/23/10 7:49 AM, Robert Haas wrote:
> I haven't looked at the patch yet, but I think we should continue to
> allow superuser-ness to be *sufficient* for replication - i.e.
> superusers will automatically have the replication privilege just as
> they do any other - and merely allow this as an option for when you
> want to avoid doing it that way.

Yes.  Currently I already create a separate "replicator" superuser just
so that I can simply track which connections belong to replication.  It
would be great if it could make the "replicator" user less than a superuser.

If we still make it possible for "postgres" to replicate, then we don't
add any complexity to the simplest setup.

--                                  -- Josh Berkus                                    PostgreSQL Experts Inc.
                        http://www.pgexperts.com
 


pgsql-hackers by date:

Previous
From: "Kevin Grittner"
Date:
Subject: Re: [PATCH] V3: Idle in transaction cancellation
Next
From: Alvaro Herrera
Date:
Subject: Re: Database file copy