Re: has_privs_of_role vs. is_member_of_role, redux - Mailing list pgsql-hackers

From Robert Haas
Subject Re: has_privs_of_role vs. is_member_of_role, redux
Date
Msg-id CA+TgmoZFCU_R2yqKDtV-tqxfnPpSnh5L6+T60_MhBCWOyizewA@mail.gmail.com
Whole thread Raw
In response to Re: has_privs_of_role vs. is_member_of_role, redux  (Wolfgang Walther <walther@technowledgy.de>)
Responses Re: has_privs_of_role vs. is_member_of_role, redux
List pgsql-hackers
On Thu, Sep 8, 2022 at 11:45 AM Wolfgang Walther
<walther@technowledgy.de> wrote:
> I think to change the owner of an object from role A to role B, you just
> need a different "privilege" on that role B to "use" the role that way,
> which is distinct from INHERIT or SET ROLE "privileges".

It's not distinct, though, because if you can transfer ownership of a
table to another user, you can use that ability to gain the privileges
of that user.

-- 
Robert Haas
EDB: http://www.enterprisedb.com



pgsql-hackers by date:

Previous
From: Justin Pryzby
Date:
Subject: Re: list of acknowledgments for PG15
Next
From: "Drouvot, Bertrand"
Date:
Subject: Re: [PATCH] Query Jumbling for CALL and SET utility statements