Re: [GENERAL] indirect membership in group roles

2009-04-09 Thread Kevin Field
On Apr 2, 6:48 pm, t...@sss.pgh.pa.us (Tom Lane) wrote: > Kev writes: > > For some reason, which I couldn't see spelled out very well in the > > docs for GRANT ROLE and SET ROLE,indirectmembership in the group > > "user" doesn't give one its privileges unless you SET ROLE "user" > > first, even if

Re: [GENERAL] indirect membership in group roles

2009-04-02 Thread Tom Lane
Kev writes: > For some reason, which I couldn't see spelled out very well in the > docs for GRANT ROLE and SET ROLE, indirect membership in the group > "user" doesn't give one its privileges unless you SET ROLE "user" > first, even if all roles involved have INHERIT set. Really? Works for me: r

[GENERAL] indirect membership in group roles

2009-04-02 Thread Kev
Suppose I have some group roles, say "student" and "employee", to which I want to grant another group role, "user". I then want to give privileges to an updateable view "my_preferences" to "user" so that they'll be given to any login role that's a member of "student" or "employee". Seems sensible