Re: Granting SET and ALTER SYSTE privileges for GUCs

[Mark Dilger]

> On Nov 17, 2021, at 9:06 AM, Andrew Dunstan <and...@dunslane.net> wrote:
> 
> I agree it's not ideal. At the time I suggested a more flexible approach
> I hadn't really thought about the problems of upgrading. If you can come
> up with something that works there then I'll be all ears.

Are you talking about upgrades preserving revocations of privileges on gucs 
from predefined roles, or merely preserving grants and revocation of privileges 
on gucs to regular roles?  I think the former problem is easily handled by not 
shipping any predefined roles with such privileges.  The latter problem would 
seem to be a mere matter of programming, something I'm working on but don't 
have finished.  (But maybe you see dragons ahead for me that I'm not seeing 
yet?)

—
Mark Dilger
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company