Re: replacing role-level NOINHERIT with a grant-level option
Robert Haas <robertmhaas@gmail.com>
From: Robert Haas <robertmhaas@gmail.com>
To: Nathan Bossart <nathandbossart@gmail.com>
Cc: Joe Conway <mail@joeconway.com>, Tom Lane <tgl@sss.pgh.pa.us>, "Bossart, Nathan" <bossartn@amazon.com>, Stephen Frost <sfrost@snowman.net>, PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2022-07-08T19:56:56Z
Lists: pgsql-hackers
Attachments
- v3-0001-Allow-grant-level-control-of-role-inheritance-beh.patch (application/octet-stream) patch v3-0001
On Tue, Jul 5, 2022 at 8:04 AM Robert Haas <robertmhaas@gmail.com> wrote: > On Sun, Jul 3, 2022 at 1:17 PM Nathan Bossart <nathandbossart@gmail.com> wrote: > > If by "bolder" you mean "mark [NO]INHERIT as deprecated-and-to-be-removed > > and begin emitting WARNINGs when it and WITH INHERIT DEFAULT are used," I > > think it's worth consideration. I suspect it will be hard to sell removing > > [NO]INHERIT in v16 because it would introduce a compatibility break without > > giving users much time to migrate. I could be wrong, though. > > It's a fair point. But, if our goal for v16 is to do something that > could lead to an eventual deprecation of [NO]INHERIT, I still think > removing WITH INHERIT DEFAULT from the patch set is probably a good > idea. So here is an updated patch with that change. For those who may not have read the entire thread, the current patch does not actually remove the role-level option as the subject line suggests, but rather makes it set the default for future grants as suggested by Tom in http://postgr.es/m/1066202.1654190251@sss.pgh.pa.us -- Robert Haas EDB: http://www.enterprisedb.com
Commits
Same data as JSON:
GET /api/v1/messages/:b64id/commits
the thread's linked commits as JSON, with link sources.
API reference →
-
Fix a bug in roles_is_member_of.
- 0101f770a05b 16.0 landed
-
docs: Fix up some out-of-date references to INHERIT/NOINHERIT.
- 620ac285483f 16.0 landed
-
Allow grant-level control of role inheritance behavior.
- e3ce2de09d81 16.0 landed
-
Make role grant system more consistent with other privileges.
- ce6b672e4455 16.0 cited
-
Document basebackup_to_shell.required_role.
- 26a0c025e233 15.0 landed