Re: superusers are members of all roles?

Tom Lane <tgl@sss.pgh.pa.us>

From: Tom Lane <tgl@sss.pgh.pa.us>
To: Andrew Dunstan <andrew@dunslane.net>
Cc: Christian Ullrich <chris@chrullrich.net>, pgsql-hackers@postgresql.org
Date: 2011-04-07T15:01:19Z
Lists: pgsql-hackers
Andrew Dunstan <andrew@dunslane.net> writes:
> I thought about that. What I'd like to know is how many people actually 
> want and use and expect the current behaviour. If it's more than a 
> handful (which I seriously doubt) then that's probably the way to go. 
> Otherwise it seems more trouble than it's worth.

Well, the point here is that "is_member_of" is currently considered
to be a kind of privilege test, and of course superusers should
automatically pass every privilege test.  If you want it to not act
that way in some circumstances, we need a fairly clear theory as to
which circumstances it should act which way in.

			regards, tom lane