Re: fixing CREATEROLE
От | walther@technowledgy.de |
---|---|
Тема | Re: fixing CREATEROLE |
Дата | |
Msg-id | 9a1aaf58-1244-3c20-9758-411066666c8d@technowledgy.de обсуждение исходный текст |
Ответ на | Re: fixing CREATEROLE (Mark Dilger <mark.dilger@enterprisedb.com>) |
Ответы |
Re: fixing CREATEROLE
|
Список | pgsql-hackers |
Mark Dilger: > Robert's patch tries to deal with the (possibly unwanted) role membership by setting up defaults to mitigate the effects,but that is more confusing to me than just de-conflating role membership from role administration, and giving rolecreators administration over roles they create, without in so doing giving them role membership. I don't recall enoughdetails about how hard it is to de-conflate role membership from role administration, and maybe that's a non-starterfor reasons I don't recall at the moment. Isn't this just GRANT .. WITH SET FALSE, INHERIT FALSE, ADMIN TRUE? That should allow role administration, without actually granting membership in that role, yet, right? Best, Wolfgang
В списке pgsql-hackers по дате отправления: