pgsql: Default monitoring roles

From: Simon Riggs <simon(at)2ndQuadrant(dot)com>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Default monitoring roles
Date: 2017-03-30 18:20:47
Message-ID: E1ctegh-0000Ru-LA@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

Default monitoring roles

Three nologin roles with non-overlapping privs are created by default
* pg_read_all_settings - read all GUCs.
* pg_read_all_stats - pg_stat_*, pg_database_size(), pg_tablespace_size()
* pg_stat_scan_tables - may lock/scan tables

Top level role - pg_monitor includes all of the above by default, plus others

Author: Dave Page
Reviewed-by: Stephen Frost, Robert Haas, Peter Eisentraut, Simon Riggs

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/25fff40798fc4ac11a241bfd9ab0c45c085e2212

Modified Files
--------------
contrib/pg_buffercache/Makefile | 5 +--
.../pg_buffercache/pg_buffercache--1.2--1.3.sql | 7 +++++
contrib/pg_buffercache/pg_buffercache.control | 2 +-
contrib/pg_freespacemap/Makefile | 4 +--
.../pg_freespacemap/pg_freespacemap--1.1--1.2.sql | 7 +++++
contrib/pg_freespacemap/pg_freespacemap.control | 2 +-
contrib/pg_stat_statements/Makefile | 7 +++--
.../pg_stat_statements--1.4--1.5.sql | 6 ++++
contrib/pg_stat_statements/pg_stat_statements.c | 8 +++--
.../pg_stat_statements/pg_stat_statements.control | 2 +-
contrib/pg_visibility/Makefile | 3 +-
contrib/pg_visibility/pg_visibility--1.1--1.2.sql | 13 ++++++++
contrib/pg_visibility/pg_visibility.control | 2 +-
contrib/pgrowlocks/pgrowlocks.c | 9 ++++--
contrib/pgstattuple/pgstattuple--1.4--1.5.sql | 9 ++++++
doc/src/sgml/catalogs.sgml | 8 +++--
doc/src/sgml/func.sgml | 23 ++++++++------
doc/src/sgml/pgbuffercache.sgml | 5 +--
doc/src/sgml/pgfreespacemap.sgml | 5 +--
doc/src/sgml/pgrowlocks.sgml | 7 +++++
doc/src/sgml/pgstatstatements.sgml | 9 +++---
doc/src/sgml/pgstattuple.sgml | 3 +-
doc/src/sgml/pgvisibility.sgml | 5 ++-
doc/src/sgml/user-manag.sgml | 36 ++++++++++++++++++++++
src/backend/catalog/system_views.sql | 6 ++++
src/backend/replication/walreceiver.c | 3 +-
src/backend/utils/adt/dbsize.c | 20 ++++++++----
src/backend/utils/adt/pgstatfuncs.c | 6 ++--
src/backend/utils/misc/guc.c | 21 ++++++++-----
src/include/catalog/pg_authid.h | 8 +++++
30 files changed, 196 insertions(+), 55 deletions(-)

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Erik Rijkers 2017-03-30 18:31:34 Re: pgsql: Default monitoring roles
Previous Message Fujii Masao 2017-03-30 18:04:27 Re: [COMMITTERS] pgsql: Logical replication support for initial data copy

Browse pgsql-hackers by date

  From Date Subject
Next Message Simon Riggs 2017-03-30 18:24:48 Re: Monitoring roles patch
Previous Message Daniel Verite 2017-03-30 18:12:14 Re: PATCH: Batch/pipelining support for libpq