Skip to content

Commit 00be0bc

Browse files
committed
doc: PG 16 relnotes: move role INHERIT item and clarify it
Also split out new role ADMIN syntax entry. Reported-by: Pavel Luzanov Discussion: https://postgr.es/m/0ebcc8ea-7f5a-d014-d53f-e078622be35d@aklaver.com Backpatch-through: 16 only
1 parent d6af450 commit 00be0bc

File tree

1 file changed

+20
-2
lines changed

1 file changed

+20
-2
lines changed

doc/src/sgml/release-16.sgml

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -229,6 +229,24 @@ Collations and locales can vary between databases so having them as read-only se
229229
</para>
230230
</listitem>
231231

232+
<!--
233+
Author: Robert Haas <rhaas@postgresql.org>
234+
2022-08-25 [e3ce2de09] Allow grant-level control of role inheritance behavior.
235+
-->
236+
237+
<listitem>
238+
<para>
239+
Role inheritance now controls the default inheritance status of member roles added during <link linkend="sql-grant"><command>GRANT</command></link> (Robert Haas)
240+
</para>
241+
242+
<para>
243+
The role's default inheritance behavior can be overridden with the new <command>GRANT ... WITH INHERIT</command> clause.
244+
This allows inheritance of some roles and not others because the members' inheritance status is set at <command>GRANT</command> time.
245+
Previously the inheritance status of member roles was controlled only by the role's inheritance status, and
246+
changes to a role's inheritance status affected all previous and future member roles.
247+
</para>
248+
</listitem>
249+
232250
<!--
233251
Author: Robert Haas <rhaas@postgresql.org>
234252
2023-01-10 [cf5eb37c5] Restrict the privileges of CREATEROLE users.
@@ -814,11 +832,11 @@ Author: Robert Haas <rhaas@postgresql.org>
814832

815833
<listitem>
816834
<para>
817-
Allow <link linkend="sql-grant"><command>GRANT</command></link> to control role inheritance behavior (Robert Haas)
835+
Allow <link linkend="sql-grant"><command>GRANT</command></link> to use <literal>WITH ADMIN TRUE</literal>/<literal>FALSE</literal> syntax (Robert Haas)
818836
</para>
819837

820838
<para>
821-
By default, role inheritance is controlled by the inheritance status of the member role. The new <command>GRANT</command> clauses <literal>WITH INHERIT</literal> and <literal>WITH ADMIN</literal> can now override this.
839+
Previously only the <literal>WITH ADMIN OPTION</literal> syntax was supported.
822840
</para>
823841
</listitem>
824842

0 commit comments

Comments
 (0)