MIME-Version: 1.0
References: 
 <CAL9MbytWDzHYHPo31AeR=-ZcCKfQr8uXQitFNe0nehAvLze7PA@mail.gmail.com>
In-Reply-To: 
 <CAL9MbytWDzHYHPo31AeR=-ZcCKfQr8uXQitFNe0nehAvLze7PA@mail.gmail.com>
From: "David G. Johnston" <david.g.johnston@gmail.com>
Date: Sat, 11 Apr 2026 11:33:58 -0700
Message-ID: 
 <CAKFQuwaFHzyqZTPsiQRWyucy0jov9MpbvtcMGSyTE6nsBySLPQ@mail.gmail.com>
Subject: Re: how to switch user in postgres
To: ikramuddin <ikram.amani815@gmail.com>
Cc: pgsql-performance@lists.postgresql.org
Content-Type: multipart/alternative; boundary="0000000000004e8103064f3380fe"
Archived-At: 
 <https://www.postgresql.org/message-id/CAKFQuwaFHzyqZTPsiQRWyucy0jov9MpbvtcMGSyTE6nsBySLPQ%40mail.gmail.com>
Precedence: bulk

--0000000000004e8103064f3380fe
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

This seems quite misplaced on the -performance mailing list.

On Sat, Apr 11, 2026 at 10:55=E2=80=AFAM ikramuddin <ikram.amani815@gmail.c=
om>
wrote:

>
> As i was working through postgresql user and role privileges i faced an
> unexpected behavious when we revoke connect on database from a user then
> why still we need to revoke usage on schema basis and then revoke select =
,
> insert , update privileges at table table. second when i did all this one
> by one and then tried to connect to same database using \c database_name
> user_name, it failed that is perfect which i expected but when i tried to
> connect through postgres as a superuser it connect still it is fine. but
> then i write the command set role simon it connected even i revoked the
> connect privileges from the role .
>


> plz guide it is a bug or this behavious left intentionally.
>

Intentional, every object has its own permissions that are granted to roles
independently of others.


> finance=3D> reset role'
> finance'> ;
> finance'> ';
> ERROR:  syntax error at or near "'
> ;
> '"
> LINE 1: reset role'
>
                  ^
> finance=3D> reset role;
> RESET
>

You had a typo in the first attempt...

For everything else I really don't feel like trying to read your mind.  If
you have questions about specific outcomes or whatnot please ask them
directly.  But there are no known bugs here and I presume you haven't
demonstrated any - everything is working as intended.

David J.

--0000000000004e8103064f3380fe
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"fon=
t-family:arial,helvetica,sans-serif">This=C2=A0seems quite misplaced on the=
 -performance mailing list.</div></div><br><div class=3D"gmail_quote gmail_=
quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Sat, Apr 11, 2026=
 at 10:55=E2=80=AFAM ikramuddin &lt;<a href=3D"mailto:ikram.amani815@gmail.=
com">ikram.amani815@gmail.com</a>&gt; wrote:<br></div><blockquote class=3D"=
gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20=
4,204,204);padding-left:1ex"><div dir=3D"ltr"><br><div>As i was working thr=
ough postgresql user and role privileges=C2=A0i faced an unexpected behavio=
us=C2=A0when we revoke connect on database from a user then why still we ne=
ed to revoke usage on schema basis and then revoke select , insert , update=
=C2=A0privileges at table table. second when i did all this one by one and =
then tried to connect to same database using \c database_name=C2=A0 user_na=
me, it failed that is perfect which i expected but when i tried to connect =
through postgres as a superuser it connect still it is fine. but then i wri=
te the command set role simon it connected even i revoked the connect privi=
leges from the role . </div></div></blockquote><div>=C2=A0</div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px so=
lid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>plz guide it i=
s a bug or this behavious=C2=A0left intentionally.</div></div></blockquote>=
<div><br></div><div class=3D"gmail_default" style=3D"font-family:arial,helv=
etica,sans-serif">Intentional, every object has its own permissions that ar=
e granted=C2=A0to roles independently of others.</div><div class=3D"gmail_d=
efault" style=3D"font-family:arial,helvetica,sans-serif"><br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div><br>finance=
=3D&gt; reset role&#39;<br>finance&#39;&gt; ;<br>finance&#39;&gt; &#39;;<br=
>ERROR: =C2=A0syntax error at or near &quot;&#39;<br>;<br>&#39;&quot;<br>LI=
NE 1: reset role&#39;=C2=A0</div></div></blockquote><blockquote class=3D"gm=
ail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex"><div dir=3D"ltr"><div>=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ^<br>finance=3D&gt; reset role;<br>R=
ESET<br></div></div></blockquote><div><br></div><div class=3D"gmail_default=
" style=3D"font-family:arial,helvetica,sans-serif">You had a typo in the fi=
rst attempt...</div><div class=3D"gmail_default" style=3D"font-family:arial=
,helvetica,sans-serif"><br></div><div class=3D"gmail_default" style=3D"font=
-family:arial,helvetica,sans-serif">For everything else I really don&#39;t =
feel like trying to read your mind.=C2=A0 If you have questions about speci=
fic outcomes or whatnot please ask them directly.=C2=A0 But there are no kn=
own bugs here and I presume you haven&#39;t demonstrated any - everything i=
s working as intended.</div><div class=3D"gmail_default" style=3D"font-fami=
ly:arial,helvetica,sans-serif"><br></div><div class=3D"gmail_default" style=
=3D"font-family:arial,helvetica,sans-serif">David J.</div><div class=3D"gma=
il_default" style=3D"font-family:arial,helvetica,sans-serif"><br></div><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
:1px solid rgb(204,204,204);padding-left:1ex">
</blockquote></div></div>

--0000000000004e8103064f3380fe--