06.07.2018, 22:35, "Robert Haas" <robertmh...@gmail.com>: > On Fri, Jul 6, 2018 at 1:26 PM, Fujii Masao <masao.fu...@gmail.com> wrote: >> Hmm... so pg_stat_statements_reset() is allowed to be executed by >> pg_read_all_stats role while other stats reset functions like >> pg_stat_reset() can be executed only by superusers. Which looks >> strange and inconsistent to me. > > Yeah, why would a pg_READ_all_stats role let you change stuff?
+1, personally i was surprised first time. But I thought that it was discussed before committing version 1.5 I read original thread [1] and, as far i see, pg_stat_statements_reset change was not discussed. Let's remove this grant? Or grant to pg_monitor role instead of pg_read_all_stats? regards, Sergei [1] https://www.postgresql.org/message-id/flat/ca+ocxoyrdsc1xylff9s698gugypxbs4cvj+0gwo8u65nmyj...@mail.gmail.com
