Re: Additional info for CREATE ROLE with REPLICATION - Mailing list pgsql-hackers

From David G. Johnston
Subject Re: Additional info for CREATE ROLE with REPLICATION
Date
Msg-id CAKFQuwY0+VpWDHHbSpRhcyOmqHX1kOrP3fAVVJ+6cLh2uhPVaQ@mail.gmail.com
Whole thread Raw
In response to Re: Additional info for CREATE ROLE with REPLICATION  (Marcos Pegoraro <marcos@f10.com.br>)
List pgsql-hackers
On Wednesday, November 26, 2025, Marcos Pegoraro <marcos@f10.com.br> wrote:
Em ter., 25 de nov. de 2025 às 23:22, Chao Li <li.evan.chao@gmail.com> escreveu:
> <0001-Master - Additional info for create role with REPLICATION.diff>

ok, I understand that, but the REPLICATION paragraph says "A role having the REPLICATION attribute is a very highly privileged role". So the user thinks, well, if this role is a highly privileged role, he should have SELECT permission automatically, right ? And it does not, so a warning like this would be fine, I think.


Maybe the wording “highly privileged” should be reconsidered then to not imply never needing to apply grants.

It also occurs to me, that section probably would be better off with some cross-references to the sections that talk about replication in detail instead of putting the detail here.

So, maybe replace “highly privileged” with “additional grants might be necessary depending on whether you are doing (link) physical or (link) logical replication”.

David J.

pgsql-hackers by date:

Previous
From: Nathan Bossart
Date:
Subject: Re: Remove unused struct fields
Next
From: Dean Rasheed
Date:
Subject: Re: Second RewriteQuery complains about first RewriteQuery in edge case