Re: printing PGresult content with gdb

      Envoyé: mercredi 3 juillet 2024 à 17:55 De: "Tom Lane" À: clippe...@gmx.fr Cc: pgsql-general@lists.postgresql.org Objet: Re: printing PGresult content with gdb clippe...@gmx.fr writes: > I don't know if it is the right mailing list, but i was > wondering if one could introspect via gdb th

New Meet-up in the Stuttgart / Tübingen

To all PostgreSQL fans in the Stuttgart area! We would like to invite you to the first meetup that will take place in Tübingen this *Thursday, 11 July starting 17:30CEST*. If you are in the area please come! You need to register to get access to the building, so follow the link and RSVP now: http

Upgrading from v12.7 to v15.7

Hello Engineers, After upgrading from v12.7 to v15.7, I ran the following command and got this error message. postgres_upgrade_work_area]$ /usr/pgsql-15/bin/pg_upgrade \ > --check \ --old-datadir=/data/postgres12 \ > --old-datadir=/data/postgres12 \ > --new-datadir=/data/postgres \ > --old-bindir=

v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

Hi, This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role granted membership gain any ability it didn't have before in that case?

Re: Upgrading from v12.7 to v15.7

Hi, Cstore -https://github.com/citusdata/cstore_fdw Oracle_fdw - https://github.com/laurenz/oracle_fdw/releases/tag/ORACLE_FDW_2_6_0 On Mon, Jul 8, 2024, 19:52 Yongye Serkfem wrote: > Hello Engineers, > After upgrading from v12.7 to v15.7, I ran the following command and got > this error mess

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 12:23 PM Christophe Pettus wrote: > > This is more curiosity than anything else. In the v16 role system, is > there actually any reason to grant membership in a role to a different > role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role > granted members

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

> On Jul 8, 2024, at 12:58, David G. Johnston > wrote: > That scenario is allowed but provides no useful in-server behavior. That was my conclusion as well. Thanks!

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, 2024-07-08 at 12:22 -0700, Christophe Pettus wrote: > This is more curiosity than anything else. In the v16 role system, is there > actually any > reason to grant membership in a role to a different role, but with SET FALSE, > INHERIT FALSE, > and ADMIN FALSE? Does the role granted memb

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

> On Jul 8, 2024, at 13:25, Laurenz Albe wrote: > I didn't test it, but doesn't that allow the member rule to drop objects owned > be the role it is a member of? No, apparently not.

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

> On Jul 8, 2024, at 13:29, Christophe Pettus wrote: > > > >> On Jul 8, 2024, at 13:25, Laurenz Albe wrote: >> I didn't test it, but doesn't that allow the member rule to drop objects >> owned >> be the role it is a member of? > > No, apparently not. Just from a quick check, it looks lik

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

Christophe Pettus writes: >> On Jul 8, 2024, at 13:25, Laurenz Albe wrote: >> I didn't test it, but doesn't that allow the member rule to drop objects >> owned >> be the role it is a member of? > No, apparently not. IIUC, you need at least one of SET TRUE and INHERIT TRUE to be able to access

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Monday, July 8, 2024, Christophe Pettus wrote: > > > > On Jul 8, 2024, at 13:29, Christophe Pettus wrote: > > > > > > > >> On Jul 8, 2024, at 13:25, Laurenz Albe > wrote: > >> I didn't test it, but doesn't that allow the member rule to drop > objects owned > >> be the role it is a member of?

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On 08.07.2024 22:22, Christophe Pettus wrote: This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role granted membership gain any abili

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

Pavel Luzanov writes: > On 08.07.2024 22:22, Christophe Pettus wrote: >> This is more curiosity than anything else. In the v16 role system, is there >> actually any reason to grant membership in a role to a different role, but >> with SET FALSE, INHERIT FALSE, and ADMIN FALSE? Does the role gr

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On 09.07.2024 00:16, Tom Lane wrote: Pavel Luzanov writes: On 08.07.2024 22:22, Christophe Pettus wrote: This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a different role, but with SET FALSE, INHERIT FALSE, and

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 2:16 PM Tom Lane wrote: > Pavel Luzanov writes: > > On 08.07.2024 22:22, Christophe Pettus wrote: > >> This is more curiosity than anything else. In the v16 role system, is > there actually any reason to grant membership in a role to a different > role, but with SET FALSE

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

"David G. Johnston" writes: > On Mon, Jul 8, 2024 at 2:16 PM Tom Lane wrote: >> Pavel Luzanov writes: > On 08.07.2024 22:22, Christophe Pettus wrote: This is more curiosity than anything else. In the v16 role system, is there actually any reason to grant membership in a role to a diff

SQL: Chaining versus Pipelining

Hi PgSQL general mailing lists, In Postgres Weekly, I encountered this interesting article. The documentation on the use of AND CHAIN is her

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 3:08 PM Tom Lane wrote: > "David G. Johnston" writes: > > On Mon, Jul 8, 2024 at 2:16 PM Tom Lane wrote: > >> Pavel Luzanov writes: > > On 08.07.2024 22:22, Christophe Pettus wrote: > This is more curiosity than anything else. In the v16 role system, is > ther

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

"David G. Johnston" writes: > On Mon, Jul 8, 2024 at 3:08 PM Tom Lane wrote: >> That doesn't make it not a bug. > Fair, the code was from a time when membership implied SET permission which > apparently was, IMO, still is, a sufficient reason to allow a member of > that group to login. > By maki

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 3:58 PM Tom Lane wrote: > I'd argue that INHERIT TRUE should be required. The point of SET TRUE > with INHERIT FALSE is that you must *explicitly* do SET ROLE or > equivalent in order to have access to the privileges of the referenced > role. I think that blast radius is

Re: v16 roles, SET FALSE, INHERIT FALSE, ADMIN FALSE

On Mon, Jul 8, 2024 at 6:08 PM Tom Lane wrote: > >> Hmm, if that check doesn't require INHERIT TRUE I'd say it's > >> a bug. > > > The code doesn't support that claim. > > That doesn't make it not a bug. Robert, what do you think? If this > is correct behavior, why is it correct? Correct is deb