Re: superusers are members of all roles? - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: superusers are members of all roles?
Date
Msg-id 4E6D7CB7.3060200@dunslane.net
Whole thread Raw
In response to Re: superusers are members of all roles?  (Stephen Frost <sfrost@snowman.net>)
Responses Re: superusers are members of all roles?
List pgsql-hackers

On 09/11/2011 10:32 PM, Stephen Frost wrote:
> * Andrew Dunstan (andrew@dunslane.net) wrote:
>>>     Address problem where superusers are assumed to be members of all groups
>>>     
>>>         http://archives.postgresql.org/pgsql-hackers/2011-04/msg00337.php
>> This turns out to be a one-liner.
> I really don't know that I agree with removing this, to be honest..  I
> haven't got time at the moment to really discuss it, but at the very
> least, not being able to 'set role' to any user when postgres would be
> REALLY annoying..
>
>     

It's NOT changing that. All this affects is how +groupname is treated in 
pg_hba.conf, i.e. do we treat every superuser there as being a member of 
every group.

cheers

andrew


pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: superusers are members of all roles?
Next
From: Robert Haas
Date:
Subject: Re: psql additions