Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to content

Commit 938548b

Browse files
committed
doc: Reword description of roles able to view track_activities's info
The information generated when track_activities is accessible to superusers, roles with the privileges of pg_read_all_stats, as well as roles one has the privileges of. The original text did not outline the last point, while the change done in ac1ae47 was unclear about the second point. Per discussion with Nathan Bossart. Discussion: https://postgr.es/m/20220521185743.GA886636@nathanxps13 Backpatch-through: 10
1 parent 1e68029 commit 938548b

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

doc/src/sgml/config.sgml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7296,10 +7296,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv;
72967296
executing command of each session, along with the time when
72977297
that command began execution. This parameter is on by
72987298
default. Note that even when enabled, this information is not
7299-
visible to all users, only to superusers, members of the
7300-
<literal>pg_read_all_stats</literal> role and the user owning
7301-
the session being reported on, so it should not represent a
7302-
security risk.
7299+
visible to all users, only to superusers, roles with privileges of the
7300+
<literal>pg_read_all_stats</literal> role and the user owning the
7301+
sessions being reported on (including sessions belonging to a role they
7302+
have the privileges of), so it should not represent a security risk.
73037303
Only superusers can change this setting.
73047304
</para>
73057305
</listitem>

0 commit comments

Comments
 (0)