New group roles always inherit privileges... - Mailing list pgadmin-support

From Allen, Mike
Subject New group roles always inherit privileges...
Date
Msg-id A4BA5B349A98B749A175B694244463010898A2@plye001.ad.durrusa.com
Whole thread Raw
List pgadmin-support
<div class="Section1"><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">Platform: Windows XP (with SP2)</span></font><p class="MsoNormal"><font face="Tahoma"
size="1"><spanstyle="font-size:9.0pt; 
font-family:Tahoma">Language: en-us</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma">Distribution: Windows binary installer</span></font><p class="MsoNormal"><font face="Tahoma"
size="1"><spanstyle="font-size:9.0pt; 
font-family:Tahoma">Version: 1.4-rc1</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">To reproduce:</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1
lfo1"><fontface="Tahoma" size="1"><span style="font-size:9.0pt;font-family:Tahoma"><span
style="mso-list:Ignore">1.<fontface="Times New Roman" size="1"><span style="font:7.0pt "Times New Roman"">      
</span></font></span></span></font><fontface="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma">Right-clickon Group Roles, select “New Group Role”.</span></font><p
class="MsoNormal"style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma"><spanstyle="mso-list:Ignore">2.<font face="Times New Roman" size="1"><span
style="font:7.0pt"Times New Roman"">       </span></font></span></span></font><font face="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma">NewGroup Role dialog appears.</span></font><p class="MsoNormal"
style="margin-left:.5in;text-indent:-.25in;mso-list:l0level1 lfo1"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma"><spanstyle="mso-list:Ignore">3.<font face="Times New Roman" size="1"><span
style="font:7.0pt"Times New Roman"">       </span></font></span></span></font><font face="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma">Enter“test” for role name, leave all privilege settings cleared & click
OK. Dialog closes, new group role created.</span></font><p class="MsoNormal"
style="margin-left:.5in;text-indent:-.25in;mso-list:l0level1 lfo1"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma"><spanstyle="mso-list:Ignore">4.<font face="Times New Roman" size="1"><span
style="font:7.0pt"Times New Roman"">       </span></font></span></span></font><font face="Tahoma" size="1"><span
style="font-size:9.0pt;font-family:Tahoma">Clickon “test” under “Group Roles” (expand latter and refresh if necessary).
 Under“Properties” tab in the upper right-hand window frame, you will see “Inherits?” Yes – even though this setting
wasleft cleared when creating the group role.</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">Problem is that, when creating a new group role, the SQL produced is either:</span></font><p
class="MsoNormal"><fontface="Tahoma" size="1"><span style="font-size:9.0pt; 
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">CREATE ROLE somegrouprole</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma">   VALID UNTIL ‘infinity’;</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">(if the “Inherits rights from parent roles” Role Privilege is clear) or</span></font><p
class="MsoNormal"><fontface="Tahoma" size="1"><span style="font-size:9.0pt; 
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">CREATE ROLE somegrouprole</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma">  INHERIT</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma">   VALID UNTIL ‘infinity’;</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">(if the</span></font><font face="Tahoma" size="1"><span style="font-size:9.0pt;font-family:Tahoma">
“Inheritsrights from parent roles” Role Privilege is set).</span></font><p class="MsoNormal"><font face="Tahoma"
size="1"><spanstyle="font-size:9.0pt; 
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">The latter is fine, but since PostgreSQL supplies INHERIT as a default, the former should
read:</span></font><pclass="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt; 
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">CREATE ROLE somegrouprole</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma">  NOINHERIT</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma">   VALID UNTIL ‘infinity’;</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span
style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">----</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">Mike</span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma"> </span></font><p class="MsoNormal"><font face="Tahoma" size="1"><span style="font-size:9.0pt;
font-family:Tahoma">Simulation Engineers do it with models virtually every day!</span></font></div>

pgadmin-support by date:

Previous
From: Joost Kraaijeveld
Date:
Subject: Re: Debian AMD64 compile problem
Next
From: "Dave Page"
Date:
Subject: Re: New group roles always inherit privileges...