On Wed, Mar 22, 2023 at 3:53 PM Jeff Davis <pg...@j-davis.com> wrote: > Is there any chance I can convince you to separate the privileges of > using a connection string and creating a subscription, as I > suggested[1] earlier?
What would this amount to concretely? Also adding a pg_connection_string predefined role and requiring both that and pg_create_subscription in all cases until your proposed changes get made? If so, I don't think that's a good idea. Maybe for some reason your proposed changes won't end up happening, and then we've just got a useless extra thing that makes things confusing. I think that adding a pg_connection_string privilege properly belongs to whatever patch makes it possible to separate the connection string from the subscription, and that we probably shouldn't add those even in separate commits, let alone in separate major releases. -- Robert Haas EDB: http://www.enterprisedb.com
