[check_postgres] Super user role

[David Christensen]

Hi Norman,

You’re envisioning something which if set just does a `SET ROLE …` after making the connection but before running the individual checks? This does not seem like it would be very hard given a `psql` >= 9.5, as we could add the additional commands to the generated `psql` commands.

Supporting versions earlier than this would be quite a bit harder.  Would that support your needs or do you have older databases than 9.5?  (If 9.5 is in fact the cutoff for support, I’m fine with adding new features that would support all supported PostgreSQL versions.)

Best,

David
--
David Christensen
Senior Software and Database Engineer
End Point Corporation
david at endpoint.com
785-727-1171


> On Oct 15, 2020, at 1:29 PM, Norman Wong <Norman.Wong at cn.ca> wrote:
> 
> Thanks for producing this great module.  I’d like to suggest a small addition.
> 
> In our organization we do not grant superuser to any login roles.  There is a group role with superuser authority.  Superuser privilege cannot be inherited.  The login roles in this group must explicitly set the role to the superuser group to elevate their privileges.
> 
> There are a number of checks within check_postgres.pl that require superuser privilege.  Would it be possible to have a parameter where we can pass the superuser group role (e.g. –role )?
> 
> Thanks,
> 
> 
> Norman Wong, BMath, FLMI, RRCP Certified
> Specialist Database, IT Technology & Infrastructure for Db2, Postgresql, Hana DB, and Versant
> Management | Information Technology
> T: 514-399-7264 | C: 514-206-2258
> Celebrating 100 years | Célébrons nos 100 ans
> 
> 
> _______________________________________________
> Check_postgres mailing list
> Check_postgres at bucardo.org
> https://bucardo.org/mailman/listinfo/check_postgres

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <https://bucardo.org/pipermail/check_postgres/attachments/20201018/92499ba2/attachment.sig>