Hi Dustin, El sáb, 24 de oct de 2026, 8:45 a.m., Dustin Sanza <[email protected]> escribió:
> Hi, > > I'm looking for a supported PostgreSQL 17 mechanism to keep selected > role attributes and memberships stable between verification and > COMMIT. This is a design question, not a bug report. > > Assume the transaction's role is NOSUPERUSER, has CREATEROLE and ADMIN > OPTION on the relevant non-superuser roles, but has no direct UPDATE > privilege on system catalogs. Other legitimately authorized > administrative sessions may be running; this is not an attempt to > constrain a malicious superuser. > > <...> > The narrow question: under the privileges above, is there supported > SQL that prevents or safely serializes concurrent ALTER ROLE attribute > changes until COMMIT without first rewriting those attributes and > potentially concealing unexpected drift? > As I understand it, you may alter roles between transactions for that user, not during a transaction. <...> > Please keep me copied on replies, as I am not subscribed. > > Thank you, > Dustin Sanza > Best regards Olivier > >
