Обсуждение: new warning message

On IRC today someone brought up a problem in which users were still able
to connect to a database after a "REVOKE CONNECT ... FROM theuser". The
reason theuser is still able to connect is because PUBLIC still has
privileges to connect by default (AndrewSN was the one who answered
this).

Would it be reasonable to throw a warning if you revoke a privilege from
some role, and that role inherits the privilege from some other role (or
PUBLIC)?

Regards,Jeff Davis

Jeff Davis <pgsql@j-davis.com> writes:
> Would it be reasonable to throw a warning if you revoke a privilege from
> some role, and that role inherits the privilege from some other role (or
> PUBLIC)?

This has been suggested and rejected before --- the consensus is it'd
be too noisy.

Possibly the REVOKE manual page could be modified to throw more stress
on the point.
        regards, tom lane