RE: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants

From: Jason Matthew <Jason(dot)Matthew(at)sas(dot)com>
To: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
Cc: "pgsql-bugs(at)lists(dot)postgresql(dot)org" <pgsql-bugs(at)lists(dot)postgresql(dot)org>
Subject: RE: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants
Date: 2025-05-15 00:57:21
Message-ID: BN6PR05MB331668736041912CCA1F636FF590A@BN6PR05MB3316.namprd05.prod.outlook.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Thank you for the clarification. I overlooked that changelog message (docs/release/16.0/). Existing information reads clearly. Thank you for responding. I'm set.

From: David G. Johnston <david(dot)g(dot)johnston(at)gmail(dot)com>
Sent: Wednesday, May 14, 2025 5:17 PM
To: Jason Matthew <Jason(dot)Matthew(at)sas(dot)com>
Cc: pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants

EXTERNAL
On Wednesday, May 14, 2025, Jason Matthew <Jason(dot)Matthew(at)sas(dot)com<mailto:Jason(dot)Matthew(at)sas(dot)com>> wrote:
Preface-
My apologies if choosing the wrong list.

Well, it's not a bug and is documented so ultimately it is the wrong list. Though if you fail to find the documentation as was the case here I suppose it does look like a regression/bug...
Investigation-
Neither changelog

Quoting from said changelog:

* Role inheritance now controls the default inheritance status of member roles added during GRANT<https://protect.checkpoint.com/v2/r01/___https://www.postgresql.org/docs/16/sql-grant.html___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MTQ0MWUxODRlYzAyMzdmMTlmYjZjMWY1ODYxYjRkM2U6NzpmZjhhOmM2MDVjZjdiZGQ1Mjk5MzQ5NWRhMzRjMTQ1NzgxNDZkODdmOTBhMjA2NThiMjI0NjZjYmQ1M2Y0YjgyOWFhMzI6aDpUOk4> (Robert Haas) §<https://protect.checkpoint.com/v2/r01/___https://postgr.es/c/e3ce2de09___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MTQ0MWUxODRlYzAyMzdmMTlmYjZjMWY1ODYxYjRkM2U6Nzo5NmMzOjU3Mzc4Y2ViNDZmMDQzZDBhOWY3NTFmMmVjZTkyZjAwZTc3ZWVhYzNkZDM3ODNmZjM1MDZhZDk1NDNjMmRiYzM6aDpUOk4>

The role's default inheritance behavior can be overridden with the new GRANT ... WITH INHERIT clause. This allows inheritance of some roles and not others because the members' inheritance status is set at GRANT time. Previously the inheritance status of member roles was controlled only by the role's inheritance status, and changes to a role's inheritance status affected all previous and future member roles.

David J.

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message PG Bug reporting form 2025-05-15 04:04:23 BUG #18929: After the view is created, executed query against the view definition, reported syntax error.
Previous Message Jorge Campins 2025-05-14 21:57:45 information_schema query not working in PostgreSQL version 17