Re: Add default role 'pg_access_server_files'
Stephen Frost <sfrost@snowman.net>
From: Stephen Frost <sfrost@snowman.net>
To: Magnus Hagander <magnus@hagander.net>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2018-03-06T15:00:54Z
Lists: pgsql-hackers
Attachments
- add_default_role_access_server_files_v2-master.patch (text/x-diff) patch v2
Magnus, all, * Magnus Hagander (magnus@hagander.net) wrote: > On Tue, Jan 2, 2018 at 1:08 PM, Stephen Frost <sfrost@snowman.net> wrote: > > Suggestions on a name for this..? pg_server_copy_program? > > Presumably it would also be used in postgres_fdw, so that seems like a bad > name. Maybe pg_exec_server_command? I went with 'pg_execute_server_program', since 'program' is what we use in the COPY syntax, et al. Attached is an updated patch which splits up the permissions as suggested up-thread by Magnus: The default roles added are: * pg_read_server_files * pg_write_server_files * pg_execute_server_program Reviews certainly welcome. Thanks! Stephen
Commits
-
Add default roles for file/program access
- 0fdc8495bff0 11.0 landed
-
Remove explicit superuser checks in favor of ACLs
- e79350fef291 11.0 landed
-
Support new default roles with adminpack
- 11523e860f8f 11.0 landed