Re: Delegating superuser tasks to new security roles

From: Mark Dilger <mark(dot)dilger(at)enterprisedb(dot)com>
To: torikoshia <torikoshia(at)oss(dot)nttdata(dot)com>
Cc: Jacob Champion <pchampion(at)vmware(dot)com>, sfrost(at)snowman(dot)net, robertmhaas(at)gmail(dot)com, pgsql-hackers(at)postgresql(dot)org, tgl(at)sss(dot)pgh(dot)pa(dot)us, chap(at)anastigmatix(dot)net
Subject: Re: Delegating superuser tasks to new security roles
Date: 2021-06-14 14:53:01
Message-ID: EA00F591-69FA-4568-90F1-5A1E00E31C3F@enterprisedb.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On Jun 14, 2021, at 5:51 AM, torikoshia <torikoshia(at)oss(dot)nttdata(dot)com> wrote:
>
> Thanks for working on this topic, I appreciate it!

Thank you for taking a look!

> BTW, do these patches enable non-superusers to create user with
> bypassrls?

No, I did not break out the ability to create such users.

> Since I failed to apply the patches and didn't test them,
> I may have overlooked something but I didn't find the
> corresponding codes.

Do you believe that functionality should be added? I have not thought much about that issue.


Mark Dilger
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Mark Dilger 2021-06-14 15:36:11 Re: Use extended statistics to estimate (Var op Var) clauses
Previous Message Robert Haas 2021-06-14 14:51:44 Re: Replication protocol doc fix