Re: [HACKERS] logical replication access control patches - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: [HACKERS] logical replication access control patches
Date
Msg-id 90f71750-b1a6-f667-cd4d-b6fbcd0a879c@2ndquadrant.com
Whole thread Raw
In response to Re: [HACKERS] logical replication access control patches  (Petr Jelinek <petr.jelinek@2ndquadrant.com>)
List pgsql-hackers
On 3/22/17 08:12, Petr Jelinek wrote:
> On 22/03/17 03:38, Peter Eisentraut wrote:
>> On 3/20/17 15:10, Petr Jelinek wrote:
>>> Hmm but REPLICATION role can do basebackup/consume wal, so how does
>>> giving it limited publication access help? Wouldn't we need some
>>> SUBSCRIPTION role/grant used instead for logical replication connections
>>> instead of REPLICATION for this to make sense?
>>
>> Since we're splitting up the pg_hba.conf setup for logical and physical
>> connections, it would probably not matter.
> 
> Hmm yeah I know about that, I am not quite clear on how that change
> affects this.

Well, the explanation for what I had in mind is too complicated to even
put into words, so it's probably not a good idea. ;-)

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: [HACKERS] logical replication access control patches
Next
From: Stephen Frost
Date:
Subject: Re: [HACKERS] PATCH: Make pg_stop_backup() archive wait optional