diff options
| author | Jeff Davis <jdavis@postgresql.org> | 2021-11-09 10:59:08 -0800 |
|---|---|---|
| committer | Jeff Davis <jdavis@postgresql.org> | 2021-11-09 16:59:14 -0800 |
| commit | 4168a4745492cd54a0ffffc271b452525ef4dc60 (patch) | |
| tree | d833a8db75ef5ed29ca9229db02053dc92ba85bb /src/backend/tcop/utility.c | |
| parent | b66767b56b1cd082f3499a7e5a21b480dd004f51 (diff) | |
| download | postgresql-4168a4745492cd54a0ffffc271b452525ef4dc60.tar.gz postgresql-4168a4745492cd54a0ffffc271b452525ef4dc60.zip | |
Add pg_checkpointer predefined role for CHECKPOINT command.
Any user with the privileges of pg_checkpointer can issue a CHECKPOINT
command.
Reviewed-by: Stephen Frost
Discussion: https://postgr.es/m/67a1d667e8ec228b5e07f232184c80348c5d93f4.camel%40j-davis.com
Diffstat (limited to 'src/backend/tcop/utility.c')
| -rw-r--r-- | src/backend/tcop/utility.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c index bf085aa93b2..1fbc387d471 100644 --- a/src/backend/tcop/utility.c +++ b/src/backend/tcop/utility.c @@ -24,6 +24,7 @@ #include "catalog/catalog.h" #include "catalog/index.h" #include "catalog/namespace.h" +#include "catalog/pg_authid.h" #include "catalog/pg_inherits.h" #include "catalog/toasting.h" #include "commands/alter.h" @@ -939,10 +940,10 @@ standard_ProcessUtility(PlannedStmt *pstmt, break; case T_CheckPointStmt: - if (!superuser()) + if (!has_privs_of_role(GetUserId(), ROLE_PG_CHECKPOINTER)) ereport(ERROR, (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE), - errmsg("must be superuser to do CHECKPOINT"))); + errmsg("must be superuser or have privileges of pg_checkpointer to do CHECKPOINT"))); RequestCheckpoint(CHECKPOINT_IMMEDIATE | CHECKPOINT_WAIT | (RecoveryInProgress() ? 0 : CHECKPOINT_FORCE)); |