Re: Streaming replication as a separate permissions - Mailing list pgsql-hackers

From Robert Haas
Subject Re: Streaming replication as a separate permissions
Date
Msg-id AANLkTimOBBxhJds37d4MHPy8r_zfeHa9mTt81ToiWc-r@mail.gmail.com
Whole thread Raw
In response to Re: Streaming replication as a separate permissions  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Streaming replication as a separate permissions
List pgsql-hackers
On Thu, Dec 23, 2010 at 11:00 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Florian Pflug <fgp@phlo.org> writes:
>> The problem here is that you suggest NOLOGIN should mean "Not allowed
>> to issue SQL commands", which really isn't what the name "NOLOGIN"
>> conveys.
>
> No, it means "not allowed to connect".  It's possible now to issue
> commands as a NOLOGIN user, you just have to use SET ROLE to become the
> user.  I think you're arguing about a design choice that was already
> made some time ago.

I think I agree with Florian about the confusing-ness of the proposed
semantics.  Aren't you saying you want NOLOGIN mean "not allowed to
log in for the purposes of issuing SQL commands, but allowed to log in
for replication"?  Uggh.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Streaming replication as a separate permissions
Next
From: Robert Haas
Date:
Subject: pg_dump -X