[pgadmin-support] New group roles always inherit privileges...

[Allen, Mike]

Platform: Windows XP (with SP2) Language: en-us Distribution: Windows binary installer Version: 1.4-rc1   To reproduce:   1.       Right-click on Group Roles, select “New Group Role”. 2.       New Group Role dialog appears. 3.       Enter “test” for role name, leave all privilege settings cleared & click OK.  Dialog closes, new group role created. 4.       Click on “test” under “Group Roles” (expand latter and refresh if necessary).  Under “Properties” tab in the upper right-hand window frame, you will see “Inherits?” Yes – even though this setting was left cleared when creating the group role.   Problem is that, when creating a new group role, the SQL produced is either:   CREATE ROLE somegrouprole    VALID UNTIL ‘infinity’;   (if the “Inherits rights from parent roles” Role Privilege is clear) or   CREATE ROLE somegrouprole   INHERIT    VALID UNTIL ‘infinity’;   (if the “Inherits rights from parent roles” Role Privilege is set).   The latter is fine, but since PostgreSQL supplies INHERIT as a default, the former should read:   CREATE ROLE somegrouprole   NOINHERIT    VALID UNTIL ‘infinity’;   ---- Mike   Simulation Engineers do it with models virtually every day!