Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
Дата
Msg-id 72971.1658422017@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER  ("David G. Johnston" <david.g.johnston@gmail.com>)
Ответы Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
Список pgsql-hackers
"David G. Johnston" <david.g.johnston@gmail.com> writes:
> On Thu, Jul 21, 2022 at 9:28 AM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> True, but what if the idea is to have *no* superusers?  I seem
>> to recall people being interested in setups like that.

> I would expect an initdb option (once this is possible) to specify this
> desire and we just never set one up in the first place.  It seems
> impractical to remove one after it already exists.

There has to be a role that owns the built-in objects.  Robert's point
is that pretending that that role isn't high-privilege is silly.

            regards, tom lane



В списке pgsql-hackers по дате отправления:

Предыдущее
От: "David G. Johnston"
Дата:
Сообщение: Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER
Следующее
От: Robert Haas
Дата:
Сообщение: Re: let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER