On Fri, Mar 31, 2023 at 6:46 PM Jeff Davis <pg...@j-davis.com> wrote: > I guess the "more convenient" is where I'm confused, because the "grant > subscription_owner to table owner with set role true" is not likely to > be conveniently already present; it would need to be issued manually to > take advantage of this special case.
You and I disagree about the likelihood of that, but I could well be wrong. > Do you have any concern about the weirdness where assigning the > subscription to a higher-privilege user Z would cause B's trigger to > fail? Not very much. I think the biggest risk is user confusion, but I don't think that's a huge risk because I don't think this scenario will come up very often. Also, it's kind of hard to imagine that there's a security model here which never does anything potentially surprising. -- Robert Haas EDB: http://www.enterprisedb.com
