Re: superusers are members of all roles?
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Andrew Dunstan <andrew@dunslane.net>
Cc: Christian Ullrich <chris@chrullrich.net>, pgsql-hackers@postgresql.org
Date: 2011-04-07T15:01:19Z
Lists: pgsql-hackers
Andrew Dunstan <andrew@dunslane.net> writes: > I thought about that. What I'd like to know is how many people actually > want and use and expect the current behaviour. If it's more than a > handful (which I seriously doubt) then that's probably the way to go. > Otherwise it seems more trouble than it's worth. Well, the point here is that "is_member_of" is currently considered to be a kind of privilege test, and of course superusers should automatically pass every privilege test. If you want it to not act that way in some circumstances, we need a fairly clear theory as to which circumstances it should act which way in. regards, tom lane