Re: Users and object privileges maintenance - Mailing list pgsql-general

From David G. Johnston
Subject Re: Users and object privileges maintenance
Date
Msg-id CAKFQuwbgYyx2dm1R-fYijKGuXEP6LaGwnO6NQSbAR5YfHHQ-Zw@mail.gmail.com
Whole thread Raw
In response to Re: Users and object privileges maintenance  (Dominique Devienne <ddevienne@gmail.com>)
List pgsql-general
On Sun, Feb 18, 2024, 11:35 Dominique Devienne <ddevienne@gmail.com> wrote:
On Sun, Feb 18, 2024 at 4:33 PM Pavel Luzanov <p.luzanov@postgrespro.ru> wrote:
On 18.02.2024 17:40, Dominique Devienne wrote:
Well, membership in a role mean you can "become that role", no?

Since v16, no.  There is now a grant option that controls this capability.

Thus this seems logical,
and not confusing to me, that you can act as the owner, since you SET ROLE to the owner.
They may acts as the owner even without explicit SET ROLE to the owner.
It wasn't obvious to me when I came to postgres from oracle.
Well, that depends on INHERIT on the ROLE, and since v16 on the membership GRANT, probably.

Prior to v16 only the attribute mattered.  Since v16 only the membership option matters.

David J.


pgsql-general by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: Function inserting into tstzrange ? (syntax error at or near...)
Next
From: Alec Lazarescu
Date:
Subject: Re: Partitioning options