Re: [HACKERS] Allow pg_dumpall to work without pg_authid

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: [HACKERS] Allow pg_dumpall to work without pg_authid
Дата
Msg-id 20170218230833.GA9812@tamriel.snowman.net
обсуждение исходный текст
Ответ на [HACKERS] Allow pg_dumpall to work without pg_authid  (Robins Tharakan <tharakan@gmail.com>)
Ответы Re: [HACKERS] Allow pg_dumpall to work without pg_authid  (Robins Tharakan <tharakan@gmail.com>)
Список pgsql-hackers
Greetings,

* Robins Tharakan (tharakan@gmail.com) wrote:
> I would like to work on a patch to accommodate restricted environments
> (such as AWS RDS Postgres) which don't allow pg_authid access since their
> definition of Superuser is just a regular user with extra permissions.
>
> Would you consider a patch to add a flag to work around this restriction,
> Or, do you prefer that this be maintained outside core?
>
> I could add a flag such as --avoid-pgauthid (am open to options) that skips
> pg_authid and uses pg_user (but essentially resets all User passwords).
> Mostly this is better than not being able to get the dump at all.

If anything, it should use pg_roles, not pg_user.

I don't really like the "--avoid-pgauthid" option, but "--no-passwords"
would probably work.

In general, this seems like a reasonable thing to add support for.

Thanks!

Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Stephen Frost
Дата:
Сообщение: Re: [HACKERS] logical replication access control patches
Следующее
От: Thomas Munro
Дата:
Сообщение: Re: [HACKERS] [COMMITTERS] pgsql: Add new function dsa_allocate0.