On 12/23/2014 07:01 PM, David G Johnston wrote:
[snip]
So you want to say:
GRANT IMPERSONATE TO bouncer; --covers the "ALL" requirement
instead of
GRANT victim1 TO bouncer;
GRANT victim2 TO bouncer;
etc...
-- these would still be used to cover the "limited users" requirement
?
|GRANT IMPERSONATE ON actual_role TO login_role|
would actually get us closer to how some other databases do, now
that I think of it. This could be just some syntactic sugar.
Might definitively ease migrations, if nothing else.
I appreciate the feedback. Thanks!
/ J.L.
