On 12/23/2014 07:01 PM, David G Johnston wrote:
> [snip]
> So you want to say:
>
> GRANT IMPERSONATE TO bouncer; --covers the "ALL" requirement
>
> instead of
>
> GRANT victim1 TO bouncer;
> GRANT victim2 TO bouncer;
> etc...
>
> -- these would still be used to cover the "limited users" requirement
> ?
|GRANT IMPERSONATE ON actual_role TO login_role|
would actually get us closer to how some other databases do, now
that I think of it. This could be just some syntactic sugar.
Might definitively ease migrations, if nothing else.
I appreciate the feedback. Thanks!
/ J.L.