Bryn Jeffries <bryn.jeffries@sydney.edu.au> writes:
> I have a question about preventing SET ROLE from being reset within a session.
You can't; per SQL standard, SET ROLE NONE is supposed to do exactly that.
I think you might be able to do something with invoking untrusted code
inside a SECURITY DEFINER function. That context disables both SET ROLE
and SET SESSION AUTHORIZATION. I would not want to bet a lot on that
being bulletproof, however.
regards, tom lane