Re: ToDo: possible more rights to database owners

From: Szymon Guz <mabewlun(at)gmail(dot)com>
To: Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com>
Cc: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: ToDo: possible more rights to database owners
Date: 2013-07-29 11:34:57
Message-ID: CAFjNrYvuNjTG92hrOHSC=h7Y9vj-i=nJr-rzbi1b8d5J41+jLw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 29 July 2013 13:20, Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> wrote:

> 2013/7/29 Szymon Guz <mabewlun(at)gmail(dot)com>:
> > On 29 July 2013 11:25, Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> wrote:
> >>
> >> Hello
> >>
> >> In 9.3 super user can cancel all queries or user can cancel own
> sessions.
> >>
> >> Is possible enhance this possibility to database owners? So owner can
> >> cancel or can terminate sessions related to owned databases?
> >>
> >
> > But this means that a db owner could cancel superuser's super important
> > database query. Maybe let's make a default that the owner can cancel all
> > queries except for superuser's ones. And additionaly a special right that
> > superuser can grant it to the db owner, so the owner can cancel even
> > superuser's queries?
>
> I am thinking so owner cannot cancel super user is enough. It allows
> simply cancelling and terminating connects where we have more
> application roles without superuser rights.
>

I agree.

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Andres Freund 2013-07-29 11:36:01 Re: Bison 3.0 updates
Previous Message Pavel Stehule 2013-07-29 11:20:33 Re: ToDo: possible more rights to database owners