On Tue, Nov 2, 2021 at 3:14 PM Vik Fearing <v...@postgresfriends.org> wrote:
> On 11/2/21 4:06 PM, Robert Haas wrote: > > There's bound to be somebody who wants to grant some of > > these permissions and not others, or who wants to grant the ability to > > run those commands on some tables but not others. > Is there anything stopping us from adding syntax like this? > > GRANT VACUUM, ANALYZE ON TABLE foo TO bar; > > That doesn't fix the CHECKPOINT issue, but surely vacuum and analyze can > be done that way. I would much prefer that over new predefined roles. > > This would be nice, but there is nothing to hang our hat on: > > GRANT CHECKPOINT TO username; > > Here is the thread when I last brought up this idea five years ago: https://www.postgresql.org/message-id/CAKFQuwaAhVt6audf92Q1VrELfJ%2BPz%3DuDfNb8%3D1_bqAmyDpnDmA%40mail.gmail.com I do not believe we've actually consumed any of the then available permission bits in the meanwhile. David J.