From c9c41c7a337d3e2deb0b2a193e9ecfb865d8f52b Mon Sep 17 00:00:00 2001 From: Stephen Frost Date: Thu, 1 Apr 2021 15:32:06 -0400 Subject: Rename Default Roles to Predefined Roles The term 'default roles' wasn't quite apt as these roles aren't able to be modified or removed after installation, so rename them to be 'Predefined Roles' instead, adding an entry into the newly added Obsolete Appendix to help users of current releases find the new documentation. Bruce Momjian and Stephen Frost Discussion: https://postgr.es/m/157742545062.1149.11052653770497832538%40wrigleys.postgresql.org and https://www.postgresql.org/message-id/20201120211304.GG16415@tamriel.snowman.net --- doc/src/sgml/appendix-obsolete-default-roles.sgml | 22 ++++++++++++++++++++++ doc/src/sgml/appendix-obsolete.sgml | 1 + doc/src/sgml/file-fdw.sgml | 4 ++-- doc/src/sgml/filelist.sgml | 1 + doc/src/sgml/monitoring.sgml | 2 +- doc/src/sgml/ref/copy.sgml | 2 +- doc/src/sgml/user-manag.sgml | 18 +++++++++--------- 7 files changed, 37 insertions(+), 13 deletions(-) create mode 100644 doc/src/sgml/appendix-obsolete-default-roles.sgml (limited to 'doc/src') diff --git a/doc/src/sgml/appendix-obsolete-default-roles.sgml b/doc/src/sgml/appendix-obsolete-default-roles.sgml new file mode 100644 index 00000000000..dec3c50e581 --- /dev/null +++ b/doc/src/sgml/appendix-obsolete-default-roles.sgml @@ -0,0 +1,22 @@ + + + + + Default Roles renamed to Predefined Roles + + + default-roles + + + + PostgreSQL 13 and below used the term 'Default Roles', however, as these + roles are not able to actually be changed and are installed as part of the + system at initialization time, the more appropriate term to use is "Predefined Roles". + See for current documentation regarding + Predefined Roles, and the release notes for + PostgreSQL 14 for details on this change. + + + diff --git a/doc/src/sgml/appendix-obsolete.sgml b/doc/src/sgml/appendix-obsolete.sgml index ffd7d40263e..d218de6c098 100644 --- a/doc/src/sgml/appendix-obsolete.sgml +++ b/doc/src/sgml/appendix-obsolete.sgml @@ -34,6 +34,7 @@ --> &obsolete-recovery-config; + &obsolete-default-roles; &obsolete-pgxlogdump; &obsolete-pgresetxlog; &obsolete-pgreceivexlog; diff --git a/doc/src/sgml/file-fdw.sgml b/doc/src/sgml/file-fdw.sgml index 8831f5911f1..2e21806f487 100644 --- a/doc/src/sgml/file-fdw.sgml +++ b/doc/src/sgml/file-fdw.sgml @@ -187,8 +187,8 @@ Changing table-level options requires being a superuser or having the privileges - of the default role pg_read_server_files (to use a filename) or - the default role pg_execute_server_program (to use a program), + of the role pg_read_server_files (to use a filename) or + the role pg_execute_server_program (to use a program), for security reasons: only certain users should be able to control which file is read or which program is run. In principle regular users could be allowed to change the other options, but that's not supported at present. diff --git a/doc/src/sgml/filelist.sgml b/doc/src/sgml/filelist.sgml index 70ad6a4a4fd..45b701426b9 100644 --- a/doc/src/sgml/filelist.sgml +++ b/doc/src/sgml/filelist.sgml @@ -188,6 +188,7 @@ + diff --git a/doc/src/sgml/monitoring.sgml b/doc/src/sgml/monitoring.sgml index af540fb02f2..56018745c89 100644 --- a/doc/src/sgml/monitoring.sgml +++ b/doc/src/sgml/monitoring.sgml @@ -282,7 +282,7 @@ postgres 27093 0.0 0.0 30096 2752 ? Ss 11:34 0:00 postgres: ser existence of a session and its general properties such as its sessions user and database are visible to all users. Superusers and members of the built-in role pg_read_all_stats (see also ) can see all the information about all sessions. + linkend="predefined-roles"/>) can see all the information about all sessions. diff --git a/doc/src/sgml/ref/copy.sgml b/doc/src/sgml/ref/copy.sgml index aea2eb8386a..14cd437da0a 100644 --- a/doc/src/sgml/ref/copy.sgml +++ b/doc/src/sgml/ref/copy.sgml @@ -465,7 +465,7 @@ COPY count by the server, not by the client application, must be executable by the PostgreSQL user. COPY naming a file or command is only allowed to - database superusers or users who are granted one of the default roles + database superusers or users who are granted one of the roles pg_read_server_files, pg_write_server_files, or pg_execute_server_program, since it allows reading diff --git a/doc/src/sgml/user-manag.sgml b/doc/src/sgml/user-manag.sgml index 6920f2db2b2..d171b13236b 100644 --- a/doc/src/sgml/user-manag.sgml +++ b/doc/src/sgml/user-manag.sgml @@ -483,15 +483,15 @@ DROP ROLE doomed_role; - - Default Roles + + Predefined Roles - + role - PostgreSQL provides a set of default roles + PostgreSQL provides a set of predefined roles that provide access to certain, commonly needed, privileged capabilities and information. Administrators (including roles that have the CREATEROLE privilege) can GRANT these @@ -500,14 +500,14 @@ DROP ROLE doomed_role; - The default roles are described in . - Note that the specific permissions for each of the default roles may - change in the future as additional capabilities are added. Administrators + The predefined roles are described in . + Note that the specific permissions for each of the roles may change in + the future as additional capabilities are added. Administrators should monitor the release notes for changes. -
- Default Roles +
+ Predefined Roles -- cgit v1.2.3