Re: [GENERAL] pgaduit - is there a way to audit a role - Mailing list pgsql-general

From David Steele
Subject Re: [GENERAL] pgaduit - is there a way to audit a role
Date
Msg-id d2181e95-fe61-24f3-f585-3e13e1014837@pgmasters.net
Whole thread Raw
In response to [GENERAL] pgaduit - is there a way to audit a role  (rakeshkumar464 <rakeshkumar464@outlook.com>)
List pgsql-general
On 10/30/17 6:48 PM, rakeshkumar464 wrote:
> Is there a way to audit a group like as follows
> 
> alter role db_rw set pgaudit.log = 'read,write,function,ddl'  
> 
> and then any user part of db_rw role can be audited automatically.  It does
> not seem to work if I connect to the db as rakesh who is part of db_rw role.

This will not work because settings (GUCs) on a role are not inherited
by roles (or users) that are members of that role.  This is a
characteristic of the roles system and not inherent to pgAudit.

-- 
-David
david@pgmasters.net


-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

pgsql-general by date:

Previous
From: Michael Paquier
Date:
Subject: Re: [GENERAL] PG 10 - Trouble with overlap of range partition of two dimensions
Next
From: Stephen Froehlich
Date:
Subject: Re: [GENERAL] PG 10 - Trouble with overlap of range partition of twodimensions