Re: has_privs_of_role vs. is_member_of_role, redux
Robert Haas <robertmhaas@gmail.com>
From: Robert Haas <robertmhaas@gmail.com>
To: Wolfgang Walther <walther@technowledgy.de>
Cc: Stephen Frost <sfrost@snowman.net>, "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>
Date: 2022-09-08T16:02:06Z
Lists: pgsql-hackers
On Thu, Sep 8, 2022 at 11:45 AM Wolfgang Walther <walther@technowledgy.de> wrote: > I think to change the owner of an object from role A to role B, you just > need a different "privilege" on that role B to "use" the role that way, > which is distinct from INHERIT or SET ROLE "privileges". It's not distinct, though, because if you can transfer ownership of a table to another user, you can use that ability to gain the privileges of that user. -- Robert Haas EDB: http://www.enterprisedb.com
Commits
-
Make ALTER DEFAULT PRIVILEGES require privileges, not membership.
- 48a257d444a7 16.0 landed