database/postgres
database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-06-01 14:21:49 +03:00
Code

Doc: explain how to test ADMIN privilege with pg_has_role().

Browse Source 
This has always been possible, but the syntax is a bit obscure,
and our user-facing docs were not very helpful.  Spell it out
more clearly.

Per complaint from Dominique Devienne.  Back-patch to
all supported branches.

Discussion: https://postgr.es/m/CAFCRh-8JNEy+dV4SXFOrWca50u+d=--TO4cq=+ac1oBtfJy4AA@mail.gmail.com
This commit is contained in:
Tom Lane 2024-09-20 15:56:34 -04:00
parent fb4f5e58af
commit a47ad3a42d
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/src/sgml/func.sgml
View File

@ -25220,6 +25220,10 @@ SELECT has_function_privilege('joeuser', 'myfunc(int, text)', 'execute');
are immediately available without doing <command>SET ROLE</command>, are immediately available without doing <command>SET ROLE</command>,
while <literal>SET</literal> denotes whether it is possible to change while <literal>SET</literal> denotes whether it is possible to change
to the role using the <literal>SET ROLE</literal> command. to the role using the <literal>SET ROLE</literal> command.
<literal>WITH ADMIN OPTION</literal> or <literal>WITH GRANT
OPTION</literal> can be added to any of these privilege types to
test whether the <literal>ADMIN</literal> privilege is held (all
six spellings test the same thing).
This function does not allow the special case of This function does not allow the special case of
setting <parameter>user</parameter> to <literal>public</literal>, setting <parameter>user</parameter> to <literal>public</literal>,
because the PUBLIC pseudo-role can never be a member of real roles. because the PUBLIC pseudo-role can never be a member of real roles.