Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 6:08 PM Tom Lane wrote: > >> Hmm, if that check doesn't require INHERIT TRUE I'd say it's > >> a bug. > > > The code doesn't support that claim. > > That doesn't make it not a bug. Robert, what do you think? If this > is correct behavior, why is it correct? Correct is deb

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 3:58 PM Tom Lane wrote: > I'd argue that INHERIT TRUE should be required. The point of SET TRUE > with INHERIT FALSE is that you must *explicitly* do SET ROLE or > equivalent in order to have access to the privileges of the referenced > role. I think that blast radius is

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

"David G. Johnston" writes: > On Mon, Jul 8, 2024 at 3:08 PM Tom Lane wrote: >> That doesn't make it not a bug. > Fair, the code was from a time when membership implied SET permission which > apparently was, IMO, still is, a sufficient reason to allow a member of > that group to login. > By maki

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 3:08 PM Tom Lane wrote: > "David G. Johnston" writes: > > On Mon, Jul 8, 2024 at 2:16 PM Tom Lane wrote: > >> Pavel Luzanov writes: > > On 08.07.2024 22:22, Christophe Pettus wrote: > This is more curiosity than anything else. In the v16 role system, is > ther

SQL: Chaining versus Pipelining

Hi PgSQL general mailing lists, In Postgres Weekly, I encountered this interesting article. The documentation on the use of AND CHAIN is her

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

"David G. Johnston" writes: > On Mon, Jul 8, 2024 at 2:16 PM Tom Lane wrote: >> Pavel Luzanov writes: > On 08.07.2024 22:22, Christophe Pettus wrote: This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a diff

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 2:16 PM Tom Lane wrote: > Pavel Luzanov writes: > > On 08.07.2024 22:22, Christophe Pettus wrote: > >> This is more curiosity than anything else. In the v16 role system, is > there actually any reason to grant membership in a role to a different > role, but with SET FALSE

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On 09.07.2024 00:16, Tom Lane wrote: Pavel Luzanov writes: On 08.07.2024 22:22, Christophe Pettus wrote: This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

Pavel Luzanov writes: > On 08.07.2024 22:22, Christophe Pettus wrote: >> This is more curiosity than anything else. In the v16 role system, is there >> actually any reason to grant membership in a role to a different role, but >> with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role gr

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On 08.07.2024 22:22, Christophe Pettus wrote: This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role granted membership gain any abili

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Monday, July 8, 2024, Christophe Pettus wrote: > > > > On Jul 8, 2024, at 13:29, Christophe Pettus wrote: > > > > > > > >> On Jul 8, 2024, at 13:25, Laurenz Albe > wrote: > >> I didn't test it, but doesn't that allow the member rule to drop > objects owned > >> be the role it is a member of?

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

Christophe Pettus writes: >> On Jul 8, 2024, at 13:25, Laurenz Albe wrote: >> I didn't test it, but doesn't that allow the member rule to drop objects >> owned >> be the role it is a member of? > No, apparently not. IIUC, you need at least one of SET TRUE and INHERIT TRUE to be able to access

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

> On Jul 8, 2024, at 13:29, Christophe Pettus wrote: > > > >> On Jul 8, 2024, at 13:25, Laurenz Albe wrote: >> I didn't test it, but doesn't that allow the member rule to drop objects >> owned >> be the role it is a member of? > > No, apparently not. Just from a quick check, it looks lik

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

> On Jul 8, 2024, at 13:25, Laurenz Albe wrote: > I didn't test it, but doesn't that allow the member rule to drop objects owned > be the role it is a member of? No, apparently not.

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, 2024-07-08 at 12:22 -0700, Christophe Pettus wrote: > This is more curiosity than anything else. In the v16 role system, is there > actually any > reason to grant membership in a role to a different role, but with SET FALSE, > INHERIT FALSE, > and ADMIN FALSE? Does the role granted memb

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

> On Jul 8, 2024, at 12:58, David G. Johnston > wrote: > That scenario is allowed but provides no useful in-server behavior. That was my conclusion as well. Thanks!

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 12:23 PM Christophe Pettus wrote: > > This is more curiosity than anything else. In the v16 role system, is > there actually any reason to grant membership in a role to a different > role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role > granted members

Re: Upgrading from v12.7 to v15.7

Hi, Cstore -https://github.com/citusdata/cstore_fdw Oracle_fdw - https://github.com/laurenz/oracle_fdw/releases/tag/ORACLE_FDW_2_6_0 On Mon, Jul 8, 2024, 19:52 Yongye Serkfem wrote: > Hello Engineers, > After upgrading from v12.7 to v15.7, I ran the following command and got > this error mess

v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

Hi, This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role granted membership gain any ability it didn't have before in that case?

Upgrading from v12.7 to v15.7

Hello Engineers, After upgrading from v12.7 to v15.7, I ran the following command and got this error message. postgres_upgrade_work_area]$ /usr/pgsql-15/bin/pg_upgrade \ > --check \ --old-datadir=/data/postgres12 \ > --old-datadir=/data/postgres12 \ > --new-datadir=/data/postgres \ > --old-bindir=

New Meet-up in the Stuttgart / Tübingen

To all PostgreSQL fans in the Stuttgart area! We would like to invite you to the first meetup that will take place in Tübingen this *Thursday, 11 July starting 17:30CEST*. If you are in the area please come! You need to register to get access to the building, so follow the link and RSVP now: http

Re: printing PGresult content with gdb

      Envoyé: mercredi 3 juillet 2024 à 17:55 De: "Tom Lane" À: clippe...@gmx.fr Cc: pgsql-general@lists.postgresql.org Objet: Re: printing PGresult content with gdb clippe...@gmx.fr writes: > I don't know if it is the right mailing list, but i was > wondering if one could introspect via gdb th