mirror of
https://github.com/postgres/postgres.git
synced 2025-07-28 23:42:10 +03:00
Create default roles
This creates an initial set of default roles which administrators may use to grant access to, historically, superuser-only functions. Using these roles instead of granting superuser access reduces the number of superuser roles required for a system. Documention for each of the default roles has been added to user-manag.sgml. Bump catversion to 201604082, as we had a commit that bumped it to 201604081 and another that set it back to 201604071... Reviews by José Luis Tallón and Robert Haas
This commit is contained in:
@ -824,6 +824,11 @@ ERROR: role "pg_abcdef" is reserved
|
||||
DETAIL: Cannot GRANT roles to a reserved role.
|
||||
SET ROLE pg_testrole; -- error
|
||||
ERROR: invalid value for parameter "role": "pg_testrole"
|
||||
SET ROLE pg_signal_backend; --error
|
||||
ERROR: invalid value for parameter "role": "pg_signal_backend"
|
||||
CREATE SCHEMA test_schema AUTHORIZATION pg_signal_backend; --error
|
||||
ERROR: role "pg_signal_backend" is reserved
|
||||
DETAIL: Cannot specify reserved role as owner.
|
||||
UPDATE pg_proc SET proacl = null WHERE proname LIKE 'testagg_';
|
||||
SELECT proname, proacl FROM pg_proc WHERE proname LIKE 'testagg_';
|
||||
proname | proacl
|
||||
|
@ -385,6 +385,8 @@ GRANT testrol0 TO pg_abc; -- error
|
||||
GRANT pg_abc TO pg_abcdef; -- error
|
||||
|
||||
SET ROLE pg_testrole; -- error
|
||||
SET ROLE pg_signal_backend; --error
|
||||
CREATE SCHEMA test_schema AUTHORIZATION pg_signal_backend; --error
|
||||
|
||||
UPDATE pg_proc SET proacl = null WHERE proname LIKE 'testagg_';
|
||||
SELECT proname, proacl FROM pg_proc WHERE proname LIKE 'testagg_';
|
||||
|
Reference in New Issue
Block a user