Re: role self-revocation

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: role self-revocation
Дата
Msg-id CA+TgmoY8wkrFXw3dPO+NDvqazutHF6x3UQcy-eAjLgxoj8xN=A@mail.gmail.com
обсуждение исходный текст
Ответ на Re: role self-revocation  (Mark Dilger <mark.dilger@enterprisedb.com>)
Ответы Re: role self-revocation  (Mark Dilger <mark.dilger@enterprisedb.com>)
Список pgsql-hackers
On Mon, Mar 7, 2022 at 2:59 PM Mark Dilger <mark.dilger@enterprisedb.com> wrote:
> This test failure is just a manifestation of the intended change, but assuming we make no other changes, the error
messagewould clearly need to be updated, because it suggests the role should have admin_option on itself, a situation
whichis not currently supported. 

It's been pointed out upthread that this would have undesirable
security implications, because the admin option would be inherited,
and the implicit permission isn't.

--
Robert Haas
EDB: http://www.enterprisedb.com



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Mark Dilger
Дата:
Сообщение: Re: role self-revocation
Следующее
От: Mark Dilger
Дата:
Сообщение: Re: role self-revocation