Re: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants

David G. Johnston <david.g.johnston@gmail.com>

From: "David G. Johnston" <david.g.johnston@gmail.com>
To: Jason Matthew <Jason.Matthew@sas.com>
Cc: "pgsql-bugs@lists.postgresql.org" <pgsql-bugs@lists.postgresql.org>
Date: 2025-05-14T21:16:59Z
Lists: pgsql-bugs
On Wednesday, May 14, 2025, Jason Matthew <Jason.Matthew@sas.com> wrote:

> Preface-
>
> My apologies if choosing the wrong list.
>
>
Well, it’s not a bug and is documented so ultimately it is the wrong list.
Though if you fail to find the documentation as was the case here I suppose
it does look like a regression/bug…

> Investigation-
>
> Neither changelog
>
>
>
Quoting from said changelog:


   -

   Role inheritance now controls the default inheritance status of member
   roles added during GRANT
   <https://www.postgresql.org/docs/16/sql-grant.html> (Robert Haas) §
   <https://postgr.es/c/e3ce2de09>

   The role's default inheritance behavior can be overridden with the new GRANT
   ... WITH INHERIT clause. This allows inheritance of some roles and not
   others because the members' inheritance status is set at GRANT time.
   Previously the inheritance status of member roles was controlled only by
   the role's inheritance status, and changes to a role's inheritance status
   affected all previous and future member roles.



   David J.

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →
  1. Allow grant-level control of role inheritance behavior.