Re: Can a role have indirect ADMIN OPTION on another role? - Mailing list pgsql-hackers

From David G. Johnston
Subject Re: Can a role have indirect ADMIN OPTION on another role?
Date
Msg-id CAKFQuwbcQi7edvCWDnHroy8pFD8qLHVqNm9fkHv0sYOUB=bvgQ@mail.gmail.com
Whole thread Raw
In response to Re: Can a role have indirect ADMIN OPTION on another role?  (Ashutosh Sharma <ashu.coek88@gmail.com>)
Responses Re: Can a role have indirect ADMIN OPTION on another role?
List pgsql-hackers
On Wed, Sep 6, 2023 at 1:55 PM Ashutosh Sharma <ashu.coek88@gmail.com> wrote: 
But what if roleB doesn't want to give roleA access to
the certain objects it owns.

Not doable - roleA can always pretend they are roleB one way or another since roleA made roleB.

David J.

pgsql-hackers by date:

Previous
From: Jacob Champion
Date:
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Next
From: Nathan Bossart
Date:
Subject: Re: should frontend tools use syncfs() ?