Re: Monitoring roles patch

On 3/27/17 08:54, Robert Haas wrote:
> OK, I see the points that both of you are making and I admit that
> they've got some validity to them.  Let me make a modest proposal.
> Suppose we define the pg_monitor role as strictly a bundle of
> privileges that could be granted individually if desired, and
> similarly define pg_read_all_settings and pg_read_all_stats as roles
> that are strictly recognized by the code, without any grants.

I think this is very important.  We can't have roles that do both.  That
will just cause confusion.  Security confusion.

I'm confused about the definition of the pg_read_all_stats role.  It
seems to give read access to just about everything that rhymes with
"stats" as well as a random collection of other things such as table
sizes.  Except actual table statistics, which was my first guess.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services