public inbox for pgsql-sql@postgresql.org  
help / color / mirror / Atom feed
From: David G. Johnston <david.g.johnston@gmail.com>
To: Ing. Marijo Kristo <marijo.kristo@icloud.com>
Cc: pgsql-sql@lists.postgresql.org <pgsql-sql@lists.postgresql.org>
Subject: Re: Re: Revoke Connect Privilege from Database not working
Date: Mon, 7 Apr 2025 06:42:28 -0700
Message-ID: <CAKFQuwa7m2smqqpgPetw=i8Aj-xqg9Zjc5Z2aX3AUwNh96WnXw@mail.gmail.com> (raw)

On Monday, April 7, 2025, Ing. Marijo Kristo <marijo.kristo@icloud.com>
wrote:
>
>
> Seems like a bug to me.
> Can someone else verifiy this ?
>

It would help greatly if you create a reproducer that starts from a clean
install, creates the roles and database, and demonstrates the issue.


> postgres=# \du vault_admin;
>             List of roles
>   Role name  |       Attributes
> -------------+------------------------
> vault_admin | Superuser, Create role
>
> postgres=# set role vault_admin;
>

You are setting role to another role that has superuser which is basically
pointless.

Use “granted by” in your revoke command.  If that works this isn’t a bug.

David J.


reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-sql@postgresql.org
  Cc: david.g.johnston@gmail.com, marijo.kristo@icloud.com, pgsql-sql@lists.postgresql.org
  Subject: Re: Re: Revoke Connect Privilege from Database not working
  In-Reply-To: <CAKFQuwa7m2smqqpgPetw=i8Aj-xqg9Zjc5Z2aX3AUwNh96WnXw@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox