diff options
| author | Stephen Frost | 2016-05-06 18:06:50 +0000 |
|---|---|---|
| committer | Stephen Frost | 2016-05-06 18:06:50 +0000 |
| commit | a89505fd21da337b81172871d8f65d9a4fa22a8b (patch) | |
| tree | da01d9648257bda268a0a344858b04c6735910eb /src/test/regress | |
| parent | 6bd356c33a3cf3a49313dc8638ea4bb066c4cf37 (diff) | |
Remove various special checks around default roles
Default roles really should be like regular roles, for the most part.
This removes a number of checks that were trying to make default roles
extra special by not allowing them to be used as regular roles.
We still prevent users from creating roles in the "pg_" namespace or
from altering roles which exist in that namespace via ALTER ROLE, as
we can't preserve such changes, but otherwise the roles are very much
like regular roles.
Based on discussion with Robert and Tom.
Diffstat (limited to 'src/test/regress')
| -rw-r--r-- | src/test/regress/expected/rolenames.out | 18 | ||||
| -rw-r--r-- | src/test/regress/sql/rolenames.sql | 10 |
2 files changed, 10 insertions, 18 deletions
diff --git a/src/test/regress/expected/rolenames.out b/src/test/regress/expected/rolenames.out index 15a97abe195..a1f039422fa 100644 --- a/src/test/regress/expected/rolenames.out +++ b/src/test/regress/expected/rolenames.out @@ -816,19 +816,11 @@ LINE 1: DROP USER MAPPING IF EXISTS FOR CURRENT_ROLE SERVER sv9; DROP USER MAPPING IF EXISTS FOR nonexistent SERVER sv9; -- error NOTICE: role "nonexistent" does not exist, skipping -- GRANT/REVOKE -GRANT testrol0 TO pg_abc; -- error -ERROR: role "pg_abc" is reserved -DETAIL: Cannot GRANT roles to a reserved role. -GRANT pg_abc TO pg_abcdef; -- error -ERROR: role "pg_abcdef" is reserved -DETAIL: Cannot GRANT roles to a reserved role. -SET ROLE pg_testrole; -- error -ERROR: invalid value for parameter "role": "pg_testrole" -SET ROLE pg_signal_backend; --error -ERROR: invalid value for parameter "role": "pg_signal_backend" -CREATE SCHEMA test_schema AUTHORIZATION pg_signal_backend; --error -ERROR: role "pg_signal_backend" is reserved -DETAIL: Cannot specify reserved role as owner. +GRANT testrol0 TO pg_signal_backend; -- success +SET ROLE pg_signal_backend; --success +RESET ROLE; +CREATE SCHEMA test_schema AUTHORIZATION pg_signal_backend; --success +SET ROLE testrol2; UPDATE pg_proc SET proacl = null WHERE proname LIKE 'testagg_'; SELECT proname, proacl FROM pg_proc WHERE proname LIKE 'testagg_'; proname | proacl diff --git a/src/test/regress/sql/rolenames.sql b/src/test/regress/sql/rolenames.sql index b58a16359b2..6c831b8b9f1 100644 --- a/src/test/regress/sql/rolenames.sql +++ b/src/test/regress/sql/rolenames.sql @@ -381,12 +381,12 @@ DROP USER MAPPING IF EXISTS FOR CURRENT_ROLE SERVER sv9; --error DROP USER MAPPING IF EXISTS FOR nonexistent SERVER sv9; -- error -- GRANT/REVOKE -GRANT testrol0 TO pg_abc; -- error -GRANT pg_abc TO pg_abcdef; -- error +GRANT testrol0 TO pg_signal_backend; -- success -SET ROLE pg_testrole; -- error -SET ROLE pg_signal_backend; --error -CREATE SCHEMA test_schema AUTHORIZATION pg_signal_backend; --error +SET ROLE pg_signal_backend; --success +RESET ROLE; +CREATE SCHEMA test_schema AUTHORIZATION pg_signal_backend; --success +SET ROLE testrol2; UPDATE pg_proc SET proacl = null WHERE proname LIKE 'testagg_'; SELECT proname, proacl FROM pg_proc WHERE proname LIKE 'testagg_'; |
