Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

From: Christophe Pettus <xof(at)thebuild(dot)com>
To: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
Cc: pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Date: 2024-07-08 20:36:11
Message-ID: 6A063ECC-E0FD-4CAF-A057-96BA55832889@thebuild.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

> On Jul 8, 2024, at 13:29, Christophe Pettus <xof(at)thebuild(dot)com> wrote:
>
>
>
>> On Jul 8, 2024, at 13:25, Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at> wrote:
>> I didn't test it, but doesn't that allow the member rule to drop objects owned
>> be the role it is a member of?
>
> No, apparently not.

Just from a quick check, it looks like you need INHERIT to inherit the ability to drop objects. The documentation strongly implies this, although it doesn't quite come out and say it.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2024-07-08 20:39:27 Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Previous Message Christophe Pettus 2024-07-08 20:29:55 Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE