rdelaage
/
postgresql
mirror of https://git.postgresql.org/git/postgresql.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

doc: PG 16 relnotes: move role INHERIT item and clarify it 

Also split out new role ADMIN syntax entry.

Reported-by: Pavel Luzanov

Discussion: https://postgr.es/m/0ebcc8ea-7f5a-d014-d53f-e078622be35d@aklaver.com

Backpatch-through: 16 only
This commit is contained in:
Bruce Momjian 2023-08-21 17:54:29 -04:00
parent d6af45052d
commit 00be0bc3d5
1 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
doc/src/sgml/release-16.sgml
View File

@ -229,6 +229,24 @@ Collations and locales can vary between databases so having them as read-only se
</para>
</listitem>
<!--
Author: Robert Haas <rhaas@postgresql.org>
2022-08-25 [e3ce2de09] Allow grant-level control of role inheritance behavior.
-->
<listitem>
<para>
Role inheritance now controls the default inheritance status of member roles added during <link linkend="sql-grant"><command>GRANT</command></link> (Robert Haas)
</para>
<para>
The role's default inheritance behavior can be overridden with the new <command>GRANT ... WITH INHERIT</command> clause.
This allows inheritance of some roles and not others because the members' inheritance status is set at <command>GRANT</command> time.
Previously the inheritance status of member roles was controlled only by the role's inheritance status, and
changes to a role's inheritance status affected all previous and future member roles.
</para>
</listitem>
<!--
Author: Robert Haas <rhaas@postgresql.org>
2023-01-10 [cf5eb37c5] Restrict the privileges of CREATEROLE users.
@ -814,11 +832,11 @@ Author: Robert Haas <rhaas@postgresql.org>
<listitem>
<para>
Allow <link linkend="sql-grant"><command>GRANT</command></link> to control role inheritance behavior (Robert Haas)
Allow <link linkend="sql-grant"><command>GRANT</command></link> to use <literal>WITH ADMIN TRUE</literal>/<literal>FALSE</literal> syntax (Robert Haas)
</para>
<para>
By default, role inheritance is controlled by the inheritance status of the member role. The new <command>GRANT</command> clauses <literal>WITH INHERIT</literal> and <literal>WITH ADMIN</literal> can now override this.
Previously only the <literal>WITH ADMIN OPTION</literal> syntax was supported.
</para>
</listitem>