| From: | Stephen Frost <sfrost(at)snowman(dot)net> |
|---|---|
| To: | Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com> |
| Cc: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: SUBSCRIPTIONS and pg_upgrade |
| Date: | 2017-02-17 22:21:41 |
| Message-ID: | 20170217222141.GX9812@tamriel.snowman.net |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Peter,
* Peter Eisentraut (peter(dot)eisentraut(at)2ndquadrant(dot)com) wrote:
> On 2/17/17 09:33, Stephen Frost wrote:
> >> One reason is that pg_subscription is only readable by a superuser, so
> >> we can't even dump them unless we're superuser.
> > Sure, but that's true of roles and other things.. On a system with RLS,
> > likely only the database superuser can actually read everything.
>
> There are some concurrent discussions about getting a list of
> subscriptions without having superuser. Once that is resolved, we'll
> likely have more options here, such as dumping only subscriptions you
> are owner of or something like that.
I certainly agree that we should provide a way to view subscriptions,
and perhaps do other things with them, without being a superuser.
I was going to suggest that it might make sense to have a role attribute
or a default role created for managing publications/subscriptions. It
seems like this should be independent of the existing replicaiton role
attribute, which is about physical replication.
Thanks!
Stephen
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tomas Vondra | 2017-02-17 23:22:20 | Re: gitlab post-mortem: pg_basebackup waiting for checkpoint |
| Previous Message | Peter Eisentraut | 2017-02-17 22:19:12 | Re: SUBSCRIPTIONS and pg_upgrade |