Re: TRUNCATE, VACUUM, ANALYZE privileges

Stephen Frost <sfrost(at)snowman(dot)net> writes:
> The following patch implements individual privileges for TRUNCATE,
> VACUUM and ANALYZE. Includes documentation and regression test
> updates. Resolves TODO item 'Add a separate TRUNCATE permission'.

> At least the 'no one interested has written a patch' argument is gone
> now, fire away with other comments/concerns. :)

I have a very serious problem with the idea of inventing individual
privilege bits for every maintenance command in sight. That does not
scale. How will you handle "GRANT ADD COLUMN", or "GRANT ADD COLUMN
as-long-as-its-not-SERIAL-because-I-dont-want-you-creating-sequences",
or "GRANT ALTER TABLE RELIABILITY" as soon as someone writes that patch,
or a dozen other cases that I could name without stopping for breath?

The proposed patch eats three of the five available privilege bits (that
is, available without accepting the distributed cost of enlarging ACL
bitmasks), and you've made no case at all why we should spend that
limited resource in this particular fashion.

regards, tom lane