From: | Jason Matthew <Jason(dot)Matthew(at)sas(dot)com> |
---|---|
To: | "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com> |
Cc: | "pgsql-bugs(at)lists(dot)postgresql(dot)org" <pgsql-bugs(at)lists(dot)postgresql(dot)org> |
Subject: | RE: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants |
Date: | 2025-05-15 00:57:21 |
Message-ID: | BN6PR05MB331668736041912CCA1F636FF590A@BN6PR05MB3316.namprd05.prod.outlook.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-bugs |
Thank you for the clarification. I overlooked that changelog message (docs/release/16.0/). Existing information reads clearly. Thank you for responding. I'm set.
From: David G. Johnston <david(dot)g(dot)johnston(at)gmail(dot)com>
Sent: Wednesday, May 14, 2025 5:17 PM
To: Jason Matthew <Jason(dot)Matthew(at)sas(dot)com>
Cc: pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants
EXTERNAL
On Wednesday, May 14, 2025, Jason Matthew <Jason(dot)Matthew(at)sas(dot)com<mailto:Jason(dot)Matthew(at)sas(dot)com>> wrote:
Preface-
My apologies if choosing the wrong list.
Well, it's not a bug and is documented so ultimately it is the wrong list. Though if you fail to find the documentation as was the case here I suppose it does look like a regression/bug...
Investigation-
Neither changelog
Quoting from said changelog:
* Role inheritance now controls the default inheritance status of member roles added during GRANT<https://protect.checkpoint.com/v2/r01/___https://www.postgresql.org/docs/16/sql-grant.html___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MTQ0MWUxODRlYzAyMzdmMTlmYjZjMWY1ODYxYjRkM2U6NzpmZjhhOmM2MDVjZjdiZGQ1Mjk5MzQ5NWRhMzRjMTQ1NzgxNDZkODdmOTBhMjA2NThiMjI0NjZjYmQ1M2Y0YjgyOWFhMzI6aDpUOk4> (Robert Haas) §<https://protect.checkpoint.com/v2/r01/___https://postgr.es/c/e3ce2de09___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MTQ0MWUxODRlYzAyMzdmMTlmYjZjMWY1ODYxYjRkM2U6Nzo5NmMzOjU3Mzc4Y2ViNDZmMDQzZDBhOWY3NTFmMmVjZTkyZjAwZTc3ZWVhYzNkZDM3ODNmZjM1MDZhZDk1NDNjMmRiYzM6aDpUOk4>
The role's default inheritance behavior can be overridden with the new GRANT ... WITH INHERIT clause. This allows inheritance of some roles and not others because the members' inheritance status is set at GRANT time. Previously the inheritance status of member roles was controlled only by the role's inheritance status, and changes to a role's inheritance status affected all previous and future member roles.
David J.
From | Date | Subject | |
---|---|---|---|
Next Message | PG Bug reporting form | 2025-05-15 04:04:23 | BUG #18929: After the view is created, executed query against the view definition, reported syntax error. |
Previous Message | Jorge Campins | 2025-05-14 21:57:45 | information_schema query not working in PostgreSQL version 17 |