From: Joe Conway <mail(at)joeconway(dot)com> To: Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> Cc: Nathan Bossart <nathandbossart(at)gmail(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Bossart, Nathan" <bossartn(at)amazon(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org> Subject: Re: [PATCH v2] use has_privs_for_role for predefined roles Date: 2022-03-20 16:27:47 Message-ID: 744cf762-47d3-050f-5fa1-d4f9e8dbae2e@joeconway.com Views: Whole Thread |Raw Message |Download mbox |Resend email Thread: 2021-10-27 21:13:55 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com>📎 2021-10-27 21:16:34 from Robert Haas <robertmhaas(at)gmail(dot)com> 2021-10-27 21:20:13 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2021-10-27 21:35:03 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2021-10-27 21:38:49 from "Bossart, Nathan" <bossartn(at)amazon(dot)com> 2021-11-08 20:44:50 from Stephen Frost <sfrost(at)snowman(dot)net> 2021-11-08 22:15:27 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com>📎 2021-11-10 17:45:28 from "Bossart, Nathan" <bossartn(at)amazon(dot)com> 2021-11-12 20:33:02 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com>📎 2021-11-15 22:23:48 from "Bossart, Nathan" <bossartn(at)amazon(dot)com> 2022-01-04 20:56:39 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> 2022-01-04 21:51:18 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com>📎 2022-02-06 16:38:26 from Joe Conway <mail(at)joeconway(dot)com> 2022-02-06 17:24:50 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> 2022-02-07 15:35:43 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-02-07 16:13:04 from Joe Conway <mail(at)joeconway(dot)com> 2022-02-07 17:09:45 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-02-07 17:23:28 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2022-02-08 11:59:41 from Joe Conway <mail(at)joeconway(dot)com> 2022-02-08 13:45:53 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-02-08 15:00:10 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2022-02-08 15:07:48 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-02-09 00:38:22 from Joe Conway <mail(at)joeconway(dot)com> 2022-02-09 03:54:50 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-02-09 18:13:33 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-02-09 20:58:29 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-02-09 21:51:18 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2022-02-09 21:39:11 from Joe Conway <mail(at)joeconway(dot)com> 2022-02-10 19:28:29 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-02-10 19:37:06 from Joe Conway <mail(at)joeconway(dot)com> 2022-03-03 16:26:01 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com>📎 2022-03-20 16:27:47 from Joe Conway <mail(at)joeconway(dot)com>📎 2022-03-20 16:31:06 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2022-03-20 16:34:15 from Joe Conway <mail(at)joeconway(dot)com> 2022-03-20 16:37:31 from Joshua Brindle <joshua(dot)brindle(at)crunchydata(dot)com> 2022-03-20 16:38:05 from Stephen Frost <sfrost(at)snowman(dot)net> 2022-03-21 20:15:33 from Joe Conway <mail(at)joeconway(dot)com> 2022-03-28 19:31:00 from Joe Conway <mail(at)joeconway(dot)com> 2022-03-28 19:56:18 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-03-28 20:03:33 from Joe Conway <mail(at)joeconway(dot)com> 2022-04-02 17:32:22 from Joe Conway <mail(at)joeconway(dot)com> 2022-04-04 13:05:00 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-02 16:26:48 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-02 17:17:31 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> 2022-06-02 18:06:00 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-02 21:06:18 from Andrew Dunstan <andrew(at)dunslane(dot)net> 2022-06-22 20:30:36 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-06-29 23:19:39 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-06-30 13:42:11 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-30 23:29:31 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-07-01 02:21:53 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-01 02:58:30 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-07-01 10:17:32 from Joe Conway <mail(at)joeconway(dot)com> 2022-07-01 11:48:34 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-01 12:22:53 from Joe Conway <mail(at)joeconway(dot)com> 2022-07-01 13:05:16 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-01 18:59:53 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-07-01 21:12:25 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-07-02 12:45:50 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-02 22:16:35 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-07-03 03:04:28 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-03 17:17:42 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-07-05 12:04:42 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-08 19:56:56 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-07-08 21:02:31 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-07-08 21:17:58 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-11 16:48:21 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-07-11 17:31:01 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-07-12 08:08:16 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-07-14 14:53:37 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-07-18 19:26:26 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-07-20 07:01:29 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-07-28 14:15:58 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-07-28 14:33:08 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-07-28 16:32:03 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-08-23 18:58:32 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-08-24 14:23:36 from tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> 2022-08-25 14:19:39 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-08-26 18:46:59 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-08-28 21:14:21 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-08-29 14:17:24 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-08-29 19:38:57 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-08-29 22:04:19 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-08-30 02:16:26 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-08-30 12:24:41 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-08-30 12:33:46 from Robert Haas <robertmhaas(at)gmail(dot)com>📎 2022-08-30 22:10:26 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-08-31 12:30:07 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-10-26 09:51:50 from Pavel Luzanov <p(dot)luzanov(at)postgrespro(dot)ru> 2022-08-30 17:30:17 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-08-30 19:24:56 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-08-30 21:20:35 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-08-31 12:07:00 from Robert Haas <robertmhaas(at)gmail(dot)com> 2023-04-30 05:21:27 from Noah Misch <noah(at)leadboat(dot)com> 2022-06-02 18:07:55 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-06-02 19:37:34 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-02 20:06:17 from Nathan Bossart <nathandbossart(at)gmail(dot)com> 2022-06-06 19:46:04 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-06 23:21:18 from Stephen Frost <sfrost(at)snowman(dot)net> 2022-06-07 14:25:05 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-08 14:16:26 from Stephen Frost <sfrost(at)snowman(dot)net> 2022-06-08 16:32:29 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-10 20:36:27 from Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com> 2022-06-10 22:40:03 from Stephen Frost <sfrost(at)snowman(dot)net> 2022-06-13 18:00:59 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-13 18:42:28 from "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com> 2022-06-13 19:34:31 from Robert Haas <robertmhaas(at)gmail(dot)com> 2022-06-15 09:23:06 from Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com> 2022-06-15 13:45:24 from Robert Haas <robertmhaas(at)gmail(dot)com> Lists: pgsql-hackers
On 3/3/22 11:26, Joshua Brindle wrote: > On Thu, Feb 10, 2022 at 2:37 PM Joe Conway <mail(at)joeconway(dot)com> wrote: >> >> On 2/10/22 14:28, Nathan Bossart wrote: >> > On Wed, Feb 09, 2022 at 04:39:11PM -0500, Joe Conway wrote: >> >> On 2/9/22 13:13, Nathan Bossart wrote: >> >>> I do wonder if users find the differences between predefined roles and role >> >>> attributes confusing. INHERIT doesn't govern role attributes, but it will >> >>> govern predefined roles when this patch is applied. Maybe the role >> >>> attribute system should eventually be deprecated in favor of using >> >>> predefined roles for everything. Or perhaps the predefined roles should be >> >>> converted to role attributes. >> >> >> >> Yep, I was suggesting that the latter would have been preferable to me while >> >> Robert seemed to prefer the former. Honestly I could be happy with either of >> >> those solutions, but as I alluded to that is probably a discussion for the >> >> next development cycle since I don't see us doing that big a change in this >> >> one. >> > >> > I agree. I still think Joshua's proposed patch is a worthwhile improvement >> > for v15. >> >> +1 >> >> I am planning to get into it in detail this weekend. So far I have >> really just ensured it merges cleanly and passes make world. > > Rebased patch to apply to master attached.
Well longer than I planned, but finally took a closer look.
I made one minor editorial fix to Joshua's patch, rebased to current master, and added two missing call sites that presumably are related to recent commits for pg_basebackup.
On that last note, I did not find basebackup_to_shell.required_role documented at all, and did not attempt to fix that.
When this thread petered out, it seemed that Robert was at least neutral on the patch, and everyone else was +1 on applying it to master for pg15.
As such, if there are any other issues, complaints, etc., please speak real soon now...
Thanks,
Joe