Re: Backward compat issue with v16 around ROLEs

On Wed, Sep 11, 2024 at 5:06 PM David G. Johnston
<david(dot)g(dot)johnston(at)gmail(dot)com> wrote:
> As the error indicates, this grant needs to be done with admin option.

Hi David. I did as you suggested, and it fails the same way. Did I
misunderstand you? --DD

D:\pdgm\trunk\psc2>psql service=pau16
psql (17beta3, server 16.1)
Type "help" for help.

ddevienne=> create role dd_owner createrole;
CREATE ROLE
ddevienne=> create role dd_admin noinherit;
CREATE ROLE
ddevienne=> grant dd_owner to dd_admin with admin option; -- <<<<<<<<
GRANT ROLE
ddevienne=> grant dd_owner to current_user;
GRANT ROLE
ddevienne=> set role dd_owner;
SET
ddevienne=> create role dd_user;
CREATE ROLE
ddevienne=> grant dd_admin to dd_user;
ERROR: permission denied to grant role "dd_admin"
DETAIL: Only roles with the ADMIN option on role "dd_admin" may grant
this role.
ddevienne=>