Hi, On 2021-11-04 14:25:54 -0700, Jeff Davis wrote: > On Thu, 2021-11-04 at 12:37 -0400, Robert Haas wrote: > > I don't have anything specific to propose, which I realize is kind of > > unhelpful ... but I don't like this, either. > > We can go back to having a pg_checkpoint predefined role that is only > used for the CHECKPOINT command.
What about extending GRANT to allow to grant rights on commands? Yes, it'd be a bit of work to make that work in the catalogs, but it doesn't seem too hard to tackle. Greetings, Andres Freund
