On Sun, Feb 18, 2024, 11:35 Dominique Devienne <ddevienne@xxxxxxxxx> wrote:
On Sun, Feb 18, 2024 at 4:33 PM Pavel Luzanov <p.luzanov@xxxxxxxxxxxxxx> wrote:On 18.02.2024 17:40, Dominique Devienne wrote:
Well, membership in a role mean you can "become that role", no?
Since v16, no. There is now a grant option that controls this capability.
Thus this seems logical,and not confusing to me, that you can act as the owner, since you SET ROLE to the owner.They may acts as the owner even without explicit SET ROLE to the owner. It wasn't obvious to me when I came to postgres from oracle.Well, that depends on INHERIT on the ROLE, and since v16 on the membership GRANT, probably.
Prior to v16 only the attribute mattered. Since v16 only the membership option matters.
David J.
