Greetings,
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> I'm not aware that anyone's done formal performance testing,
> but if you want to have a lot of roles in the system, my
> expectation is that you'd be better off granting privileges
> to a small number of group roles and then granting group
> role membership as appropriate.
Right- keep the ACL lists small for individual objects, then grant
membership in the appropriate roles to the actual users who log in and
such. Having lots of roles works out a lot better that way.
Thanks,
Stephen