Re: removal of md5 from example code

2018-02-22 Thread Peter Eisentraut
On 1/17/18 11:14, PG Doc comments form wrote:
> The documentation at
> https://www.postgresql.org/docs/current/static/citext.html shows an example
> using md5 for password hashes. This is generally a bad practice and not
> relevant to the feature documented. 
> 
> I recommend removing the password column from this example or replacing the
> md5 hash with something more secure (a secure hash algorithm with a salt).

This has been fixed in the master branch.

-- 
Peter Eisentraut  http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



Documentation of FOR ROLE clause of ALTER DEFAULT PRIVILEGES missing

2018-02-22 Thread PG Doc comments form
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/10/static/sql-alterdefaultprivileges.html
Description:

The documentation of ALTER DEFAULT PRIVILEGES statements seems to lack an
elaboration of the FOR ROLE clause.

It specifies what restrictions exist (namely "The name of an existing role
of which the current role is a member."), but what the specified role is
actually used for remains a mystery.

The documentation should read something like: "The default permissions are
only granted on objects created by this role."