On Sun, Feb 18, 2024, 11:35 Dominique Devienne <ddevie...@gmail.com> wrote:
> On Sun, Feb 18, 2024 at 4:33 PM Pavel Luzanov <p.luza...@postgrespro.ru> > wrote: > >> On 18.02.2024 17:40, Dominique Devienne wrote: >> >> Well, membership in a role mean you can "become that role", no? >> >> Since v16, no. There is now a grant option that controls this capability. Thus this seems logical, >> and not confusing to me, that you can act as the owner, since you SET >> ROLE to the owner. >> >> They may acts as the owner even without explicit SET ROLE to the owner. >> It wasn't obvious to me when I came to postgres from oracle. >> >> Well, that depends on INHERIT on the ROLE, and since v16 on the > membership GRANT, probably. > Prior to v16 only the attribute mattered. Since v16 only the membership option matters. David J. >
