Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers)

From:	Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>
To:	Noah Misch <noah(at)leadboat(dot)com>
Cc:	Jacob Champion <pchampion(at)vmware(dot)com>, "sfrost(at)snowman(dot)net" <sfrost(at)snowman(dot)net>, "robertmhaas(at)gmail(dot)com" <robertmhaas(at)gmail(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>, "tgl(at)sss(dot)pgh(dot)pa(dot)us" <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "chap(at)anastigmatix(dot)net" <chap(at)anastigmatix(dot)net>, torikoshia <torikoshia(at)oss(dot)nttdata(dot)com>
Subject:	Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers)
Date:	2021-07-01 15:59:02
Message-ID:	B2D91918-CD5A-4274-8494-79CFE7A5B5EA@enterprisedb.com
Views:	Raw Message | Whole Thread | Download mbox | Resend email
Thread:	2021-04-30 23:19:22 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>  2021-04-30 23:28:05 from Stephen Frost <sfrost(at)snowman(dot)net>   2021-05-01 00:13:33 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>   2021-05-01 02:00:35 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>    2021-05-01 03:27:55 from Isaac Morland <isaac(dot)morland(at)gmail(dot)com>    2021-05-01 14:07:04 from Chapman Flack <chap(at)anastigmatix(dot)net>     2021-05-01 16:13:49 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>      2021-05-01 16:37:16 from Chapman Flack <chap(at)anastigmatix(dot)net>       2021-05-03 15:22:52 from Robert Haas <robertmhaas(at)gmail(dot)com>        2021-05-03 15:44:57 from Chapman Flack <chap(at)anastigmatix(dot)net>         2021-05-03 17:23:17 from Robert Haas <robertmhaas(at)gmail(dot)com>          2021-05-03 17:43:32 from Chapman Flack <chap(at)anastigmatix(dot)net>        2021-05-03 16:25:04 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>         2021-05-03 17:33:34 from Robert Haas <robertmhaas(at)gmail(dot)com>          2021-05-03 18:41:07 from Stephen Frost <sfrost(at)snowman(dot)net>           2021-05-03 18:48:04 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>            2021-05-03 19:01:29 from Robert Haas <robertmhaas(at)gmail(dot)com>             2021-05-03 19:12:56 from Stephen Frost <sfrost(at)snowman(dot)net>           2021-05-03 18:50:28 from Robert Haas <robertmhaas(at)gmail(dot)com>  2021-05-01 00:02:09 from Chapman Flack <chap(at)anastigmatix(dot)net>  2021-05-01 21:31:29 from Michael Banck <michael(dot)banck(at)credativ(dot)de>  2021-05-12 15:59:18 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎   2021-05-12 19:58:57 from Robert Haas <robertmhaas(at)gmail(dot)com>    2021-05-13 16:05:57 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>     2021-05-13 17:41:27 from Stephen Frost <sfrost(at)snowman(dot)net>      2021-05-13 18:42:27 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>       2021-05-13 19:18:32 from Jacob Champion <pchampion(at)vmware(dot)com>        2021-05-13 19:27:15 from Stephen Frost <sfrost(at)snowman(dot)net>        2021-05-13 19:30:43 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>         2021-05-25 20:33:54 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎          2021-05-28 06:06:18 from Noah Misch <noah(at)leadboat(dot)com>           2021-05-28 17:42:21 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>            2021-07-22 15:29:32 from Robert Haas <robertmhaas(at)gmail(dot)com>             2021-07-22 17:29:13 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>              2021-07-22 18:35:13 from Robert Haas <robertmhaas(at)gmail(dot)com>           2021-06-30 01:25:31 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎            2021-07-01 15:59:02 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎             2021-07-05 08:50:19 from Andrey Borodin <x4mmm(at)yandex-team(dot)ru>              2021-07-06 16:38:01 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>             2021-07-22 06:02:58 from vignesh C <vignesh21(at)gmail(dot)com>             2021-07-22 18:21:42 from Robert Haas <robertmhaas(at)gmail(dot)com>              2021-07-22 19:00:44 from Stephen Frost <sfrost(at)snowman(dot)net>               2021-07-22 20:01:10 from Robert Haas <robertmhaas(at)gmail(dot)com>                2021-08-23 17:36:27 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎                 2021-08-23 18:13:51 from Stephen Frost <sfrost(at)snowman(dot)net>                  2021-08-23 18:42:17 from Robert Haas <robertmhaas(at)gmail(dot)com>                   2021-08-23 19:09:48 from Stephen Frost <sfrost(at)snowman(dot)net>                  2021-08-23 19:29:01 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                   2021-08-23 19:51:30 from Stephen Frost <sfrost(at)snowman(dot)net>                    2021-08-23 20:40:06 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                     2021-08-23 20:46:08 from Stephen Frost <sfrost(at)snowman(dot)net>                      2021-08-27 22:47:53 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                       2021-09-01 01:41:51 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎                        2021-09-15 14:38:44 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎                         2021-09-21 19:58:15 from Andrew Dunstan <andrew(at)dunslane(dot)net>                          2021-09-27 18:15:05 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com> 📎                           2021-10-05 00:22:04 from "Bossart, Nathan" <bossartn(at)amazon(dot)com>                            2021-10-05 02:07:38 from Stephen Frost <sfrost(at)snowman(dot)net>                             2021-10-05 03:26:09 from "Bossart, Nathan" <bossartn(at)amazon(dot)com>                            2021-10-07 16:47:57 from Robert Haas <robertmhaas(at)gmail(dot)com>                           2021-10-07 05:48:12 from Bharath Rupireddy <bharath(dot)rupireddyforpostgres(at)gmail(dot)com>                            2021-10-07 16:58:57 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                             2021-10-07 17:14:26 from Bharath Rupireddy <bharath(dot)rupireddyforpostgres(at)gmail(dot)com>                           2021-10-19 09:51:40 from Ronan Dunklau <ronan(dot)dunklau(at)aiven(dot)io>                            2021-10-20 18:39:52 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                           2021-10-19 19:28:20 from Jeff Davis <pgsql(at)j-davis(dot)com>                            2021-10-19 20:17:56 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                             2021-10-19 22:18:55 from Jeff Davis <pgsql(at)j-davis(dot)com>                              2021-10-19 22:26:20 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                               2021-10-19 22:52:46 from Stephen Frost <sfrost(at)snowman(dot)net>                                2021-10-20 17:20:28 from Jeff Davis <pgsql(at)j-davis(dot)com>                                 2021-10-20 17:32:51 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                                  2021-10-20 18:27:11 from Jeff Davis <pgsql(at)j-davis(dot)com>                                 2021-10-20 20:23:32 from Robert Haas <robertmhaas(at)gmail(dot)com>                                  2021-10-20 20:36:06 from Stephen Frost <sfrost(at)snowman(dot)net>                                   2021-10-20 21:55:54 from Jeff Davis <pgsql(at)j-davis(dot)com>                  2021-08-24 14:42:49 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>              2021-07-22 21:35:22 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>               2021-07-23 13:22:32 from Robert Haas <robertmhaas(at)gmail(dot)com>                2021-07-23 16:11:14 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                 2021-07-23 16:20:29 from Stephen Frost <sfrost(at)snowman(dot)net>                  2021-07-23 17:43:00 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                 2021-07-23 20:54:03 from Robert Haas <robertmhaas(at)gmail(dot)com>                  2021-07-23 20:57:37 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                   2021-07-23 21:04:10 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                    2021-07-23 21:24:04 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                   2021-07-26 19:09:07 from Robert Haas <robertmhaas(at)gmail(dot)com>                    2021-07-26 20:05:42 from Stephen Frost <sfrost(at)snowman(dot)net>                     2021-07-26 20:12:15 from Robert Haas <robertmhaas(at)gmail(dot)com>                      2021-07-26 20:13:37 from Robert Haas <robertmhaas(at)gmail(dot)com>                       2021-07-26 20:28:54 from Stephen Frost <sfrost(at)snowman(dot)net>                        2021-07-26 21:33:19 from Robert Haas <robertmhaas(at)gmail(dot)com>                      2021-07-26 20:25:29 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                     2021-07-26 20:24:46 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                      2021-07-26 20:46:13 from Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>                       2021-07-26 20:54:33 from Stephen Frost <sfrost(at)snowman(dot)net>                        2021-07-26 21:01:56 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                         2021-07-26 21:16:25 from Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>                          2021-07-26 21:30:45 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                      2021-07-26 20:57:57 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                       2021-07-27 14:19:15 from Robert Haas <robertmhaas(at)gmail(dot)com>                        2021-07-27 14:23:54 from Isaac Morland <isaac(dot)morland(at)gmail(dot)com>                         2021-07-27 15:27:12 from Robert Haas <robertmhaas(at)gmail(dot)com>                          2021-07-27 15:36:54 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>           2021-10-20 19:09:08 from Jeff Davis <pgsql(at)j-davis(dot)com>            2021-10-23 01:42:35 from Noah Misch <noah(at)leadboat(dot)com>             2021-10-25 16:20:36 from Stephen Frost <sfrost(at)snowman(dot)net>              2021-10-25 17:24:45 from Robert Haas <robertmhaas(at)gmail(dot)com>               2021-10-25 18:30:48 from Stephen Frost <sfrost(at)snowman(dot)net>                2021-10-25 19:25:32 from Robert Haas <robertmhaas(at)gmail(dot)com>                 2021-10-27 20:10:36 from Robert Haas <robertmhaas(at)gmail(dot)com>                  2021-10-28 18:02:14 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                   2021-10-29 23:46:52 from Jeff Davis <pgsql(at)j-davis(dot)com>                    2021-11-01 00:24:05 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                     2021-11-01 19:44:15 from Stephen Frost <sfrost(at)snowman(dot)net>                      2021-11-01 20:14:16 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                       2021-11-01 21:00:31 from Stephen Frost <sfrost(at)snowman(dot)net>                        2021-11-01 21:42:42 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                  2021-10-29 22:56:50 from Jeff Davis <pgsql(at)j-davis(dot)com>                   2021-10-30 00:34:15 from Robert Haas <robertmhaas(at)gmail(dot)com>                2021-10-25 19:30:31 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                 2021-11-01 20:13:06 from Stephen Frost <sfrost(at)snowman(dot)net>                  2021-11-01 20:23:23 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>                   2021-11-01 21:05:22 from Stephen Frost <sfrost(at)snowman(dot)net>                    2021-11-01 22:42:06 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>          2021-06-14 12:51:39 from torikoshia <torikoshia(at)oss(dot)nttdata(dot)com>           2021-06-14 14:53:01 from Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>            2021-06-15 01:40:27 from torikoshia <torikoshia(at)oss(dot)nttdata(dot)com>             2021-06-15 15:39:07 from Stephen Frost <sfrost(at)snowman(dot)net>
Lists:	pgsql-hackers

Attachment	Content-Type	Size
v4-0001-Add-default-role-for-managing-logical-replication.patch	application/octet-stream	27.9 KB
v4-0002-Add-default-role-for-host-security-operations.patch	application/octet-stream	22.8 KB
v4-0003-Add-default-role-for-network-security-operations.patch	application/octet-stream	30.2 KB
v4-0004-Add-default-role-for-database-operations.patch	application/octet-stream	49.5 KB
v4-0005-Allow-SET-and-ALTER-SYSTEM-SET-by-non-superusers.patch	application/octet-stream	1.3 MB

In response to

• Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers) at 2021-06-30 01:25:31 from Mark Dilger

Responses

• Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers) at 2021-07-05 08:50:19 from Andrey Borodin
• Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers) at 2021-07-22 06:02:58 from vignesh C
• Re: Delegating superuser tasks to new security roles (Was: Granting control of SUSET gucs to non-superusers) at 2021-07-22 18:21:42 from Robert Haas

Browse pgsql-hackers by date

	From	Date	Subject
Next Message	Euler Taveira	2021-07-01 16:01:52	Re: SSL/TLS instead of SSL in docs
Previous Message	Bharath Rupireddy	2021-07-01 15:55:41	Re: Refactor "mutually exclusive options" error reporting code in parse_subscription_options