Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

From: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
To: Christophe Pettus <xof(at)thebuild(dot)com>, pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Date: 2024-07-08 20:25:30
Message-ID: 78790ab5cdece730a2029310184f9bb9cfcc0fa6.camel@cybertec.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Mon, 2024-07-08 at 12:22 -0700, Christophe Pettus wrote:
> This is more curiosity than anything else. In the v16 role system, is there actually any
> reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE,
> and ADMIN FALSE? Does the role granted membership gain any ability it didn't have before
> in that case?

I didn't test it, but doesn't that allow the member rule to drop objects owned
be the role it is a member of?

Yours,
Laurenz Albe

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Christophe Pettus 2024-07-08 20:29:55 Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE
Previous Message Christophe Pettus 2024-07-08 20:14:21 Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE