SET ROLE versus SET SESSION AUTHORIZATION

Started by PG Bug reporting formabout 2 years ago2 messagesdocs
Jump to latest
#1PG Bug reporting form
noreply@postgresql.org

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/16/sql-set-role.html
Description:

"SET ROLE has effects comparable to SET SESSION AUTHORIZATION, but the
privilege checks involved are quite different."

What are the differences in privilege checks?

How are the two commands the same and different, semantically?

#2Laurenz Albe
laurenz.albe@cybertec.at
In reply to: PG Bug reporting form (#1)
Re: SET ROLE versus SET SESSION AUTHORIZATION

On Tue, 2024-01-30 at 17:25 +0000, PG Doc comments form wrote:

Page: https://www.postgresql.org/docs/16/sql-set-role.html
Description:

"SET ROLE has effects comparable to SET SESSION AUTHORIZATION, but the
privilege checks involved are quite different."

What are the differences in privilege checks?

How are the two commands the same and different, semantically?

The difference is revealed by "SELECT session_user".

I think that is pretty clearly described in the SET SESSION AUTHORIZATION
documentation page.

Yours,
Laurenz Albe