Streaming replication as a separate permissions
Magnus Hagander <magnus@hagander.net>
From: Magnus Hagander <magnus@hagander.net>
To: PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2010-12-23T09:53:10Z
Lists: pgsql-hackers
Commits
Same data as JSON:
GET /api/v1/messages/:b64id/commits
the thread's linked commits as JSON, with link sources.
API reference →
-
Allow Win32 to compile under MinGW. Major changes are:
- 12c942383296 7.4.1 cited
Attachments
- repl_role.patch (text/x-patch) patch
Here's a patch that changes walsender to require a special privilege for replication instead of relying on superuser permissions. We discussed this back before 9.0 was finalized, but IIRC we ran out of time. The motivation being that you really want to use superuser as little as possible - and since being a replication slave is a read only role, it shouldn't require the maximum permission available in the system. Obviously the patch needs docs and some system views updates, which I will add later. But I wanted to post what I have so far for a quick review to confirm whether I'm on the right track or not... How it works should be rather obvious - adds a "WITH REPLICATION/NOREPLICATION" to the create and alter role commands, and then check this when a connection attempts to start the walsender. -- Magnus Hagander Me: http://www.hagander.net/ Work: http://www.redpill-linpro.com/