Re: Additional role attributes && superuser review - Mailing list pgsql-hackers

From Robert Haas
Subject Re: Additional role attributes && superuser review
Date
Msg-id CA+TgmoY8q6-mohzcq58eQUiQs4nQHpxuq8AQUSZO_x4oWv3f7Q@mail.gmail.com
Whole thread Raw
In response to Re: Additional role attributes && superuser review  (Adam Brightwell <adam.brightwell@crunchydatasolutions.com>)
Responses Re: Additional role attributes && superuser review
List pgsql-hackers
On Wed, Dec 24, 2014 at 12:48 PM, Adam Brightwell
<adam.brightwell@crunchydatasolutions.com> wrote:
> * BACKUP - allows role to perform backup operations
> * LOGROTATE - allows role to rotate log files
> * MONITOR - allows role to view pg_stat_* details
> * PROCSIGNAL - allows role to signal backend processes

How about just "SIGNAL" instead of "PROCSIGNAL"?

Generally, I think we'll be happier if these capabilities have names
that are actual words - or combinations of words - rather than partial
words, so I'd suggest avoiding things like PROC for PROCESS and AUTH
for AUTHORIZATION.

In this particular case, it seems like the name of the capability is
based off the name of an internal system data structure.  That's the
sort of thing that we do not want to expose to users.  As far as we
can, we should try to describe what the capability allows, not the
details of how that is (currently) implemented.

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



pgsql-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: [COMMITTERS] pgsql: Change how first WAL segment on new timeline after promotion is
Next
From: Petr Jelinek
Date:
Subject: Re: tracking commit timestamps