Thursday, August 21, 2008

Re: [ADMIN] privilege shedding

>>> dkeeney <dvkeeney@gmail.com> wrote:

> Is there a way to non-reversibly shed privilige within a PostgreSQL
> session?

> I would like the role
> change to persist through the life of the session, without the
option
> of restoring the superuser role.

We could use this in certain circumstances. How about SET
AUTHORIZATION ROLE as syntax? (I was trying to find a reserved word
to use where LOCAL and SESSION are now allowed which would have the
right connotations. I'm entirely happy with this, but it doesn't seem
too bad....)

-Kevin

--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

No comments: