Alvaro Herrera <alvhe...@2ndquadrant.com> writes: > I'd welcome input from other people on this issue; only now I noticed > that it's buried in pgsql-docs, so CCing pgsql-hackers now.
FWIW, I would argue that LOGIN permits logging in on a regular SQL connection, while REPLICATION should permit logging in on a replication connection, and there's no reason for either to depend on or require the other. > On 2020-Apr-23, Stephen Frost wrote: >> Also- what about per-database connections? Does having REPLICATION mean >> you get to override the CONNECT privileges on a database, if you're >> connecting for the purposes of doing logical replication? No, why would it? Should LOGIN privilege mean you can override CONNECT? That's nonsense. You need the respective privilege to connect with the protocol you want to connect with, and you also need CONNECT on the DB you want to connect to. regards, tom lane