On 12/23/2014 07:01 PM, David G Johnston wrote:
So you want to say:

GRANT IMPERSONATE TO bouncer; --covers the "ALL" requirement

instead of

GRANT victim1 TO bouncer;
GRANT victim2 TO bouncer;

-- these would still be used to cover the "limited users" requirement

|GRANT IMPERSONATE ON actual_role TO login_role|

would actually get us closer to how some other databases do, now that I think of it. This could be just some syntactic sugar.
    Might definitively ease migrations, if nothing else.

I appreciate the feedback. Thanks!

    / J.L.

Reply via email to