Re: pg16 ALTER ROLE [NO]INHERIT has no effect on existing grants

On Wednesday, May 14, 2025, Jason Matthew <Jason(dot)Matthew(at)sas(dot)com> wrote:

> Preface-
>
> My apologies if choosing the wrong list.
>
>
Well, it’s not a bug and is documented so ultimately it is the wrong list.
Though if you fail to find the documentation as was the case here I suppose
it does look like a regression/bug…

> Investigation-
>
> Neither changelog
>
>
>
Quoting from said changelog:

-

Role inheritance now controls the default inheritance status of member
roles added during GRANT
<https://www.postgresql.org/docs/16/sql-grant.html> (Robert Haas) §
<https://postgr.es/c/e3ce2de09>

The role's default inheritance behavior can be overridden with the new GRANT
... WITH INHERIT clause. This allows inheritance of some roles and not
others because the members' inheritance status is set at GRANT time.
Previously the inheritance status of member roles was controlled only by
the role's inheritance status, and changes to a role's inheritance status
affected all previous and future member roles.

David J.