On 20.05.2021 21:10, Tom Lane wrote:
Pavel Luzanov <p.luza...@postgrespro.ru> writes:
So, is it correct to change description of pg_monitor role from:
"Read/execute various monitoring views and functions. This role is a member
of|pg_read_all_settings|,|pg_read_all_stats| and|pg_stat_scan_tables|."
to
"Read/execute various monitoring views and functions. The roles
pg_read_all_settings, pg_read_all_stats and pg_stat_scan_tables are members of this
role."
No, it is not. That wording implies that the built-in grants are like
GRANT pg_monitor TO pg_read_all_settings
and so on, where the truth is the opposite.
I'm totally confused. I'm taking timeout to think about it.
--
Pavel Luzanov
Postgres Professional: https://postgrespro.com
The Russian Postgres Company