Re: dropped users appear as numbers in ACL

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: DHS Webmaster <webmaster(at)dhs-club(dot)com>, <pgsql-admin(at)postgresql(dot)org>
Subject: Re: dropped users appear as numbers in ACL
Date: 2003-11-14 00:10:55
Message-ID: Pine.LNX.4.44.0311140109050.17499-100000@peter.localdomain
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Tom Lane writes:

> The reason it's difficult is that users span databases; when you drop a
> user in database A, you have no way of seeing/removing references to him
> that exist in databases B, C, ...
>
> I'm not sure there's any really good answer to this short of changing
> the way that users and databases work, which so far no one has wanted
> to do.

One possibility would be to have an explicit "flush privileges" command
that you can run over a database to clean up after this. That might also
help to support grant options on groups, which suffer from a similar
can't-look-into-other-databases problem.

--
Peter Eisentraut peter_e(at)gmx(dot)net

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Tom Lane 2003-11-14 00:18:41 Re: dropped users appear as numbers in ACL
Previous Message Tom Lane 2003-11-13 23:57:26 Re: dropped users appear as numbers in ACL