On 2021-Nov-04, Jeff Davis wrote: > But I don't see it generalizing to a lot of commands, either. I looked > at the list, and it's taking some creativity to think of more than a > couple other commands where it makes sense. Maybe LISTEN/NOTIFY? But > even then, there are three related commands: LISTEN, UNLISTEN, and > NOTIFY. Are those one privilege representing them all, two > (LISTEN/UNLISTEN, and NOTIFY), or three separate privileges?
What about things like CREATE SUBSCRIPTION/PUBLICATION? Sounds like it would be useful to allow non-superusers do those, too. That said, if the list is short, then additional predefined roles seem preferrable to having a ton of infrastructure code that might be much more clutter than what seems a short list of additional predefined roles. -- Álvaro Herrera 39°49'30"S 73°17'W — https://www.EnterpriseDB.com/ "We're here to devour each other alive" (Hobbes)
