Recognizing superuser in pg_hba.conf - Mailing list pgsql-hackers

From Vik Fearing
Subject Recognizing superuser in pg_hba.conf
Date
Msg-id 4ba3ad54-bb32-98c6-033a-ccca7058fc2f@2ndquadrant.com
Whole thread Raw
Responses Re: Recognizing superuser in pg_hba.conf  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
It can sometimes be useful to match against a superuser in pg_hba.conf.
For example, one could imagine wanting to reject nonsuperuser from a
particular database.


This used to be possible by creating an empty role and matching against
that, but that functionality was removed (a long time ago) by commit
94cd0f1ad8a.


Adding another keyword can break backwards compatibility, of course.  So
that is an issue that needs to be discussed, but I don't imagine too
many people are using role names "superuser" and "nonsuperuser". Those
who are will have to quote them.

-- 

Vik Fearing                                          +33 6 46 75 15 36
http://2ndQuadrant.fr     PostgreSQL : Expertise, Formation et Support


Attachment

pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: ALTER TABLE support for dropping generation expression
Next
From: Tom Lane
Date:
Subject: Re: PostgreSQL 12.1 patch for "private_modify" table creation option for data validation reinforcement