Commit 0adff38d authored by Michael Paquier's avatar Michael Paquier

doc: Reword description of roles able to view track_activities's info

The information generated when track_activities is accessible to
superusers, roles with the privileges of pg_read_all_stats, as well as
roles one has the privileges of.  The original text did not outline the
last point, while the change done in ac1ae47 was unclear about the
second point.

Per discussion with Nathan Bossart.

Discussion: https://postgr.es/m/20220521185743.GA886636@nathanxps13
Backpatch-through: 10
parent f82595ac
...@@ -7522,10 +7522,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv; ...@@ -7522,10 +7522,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv;
executing command of each session, along with its identifier and the executing command of each session, along with its identifier and the
time when that command began execution. This parameter is on by time when that command began execution. This parameter is on by
default. Note that even when enabled, this information is not default. Note that even when enabled, this information is not
visible to all users, only to superusers, members of the visible to all users, only to superusers, roles with privileges of the
<literal>pg_read_all_stats</literal> role and the user owning <literal>pg_read_all_stats</literal> role and the user owning the
the session being reported on, so it should not represent a sessions being reported on (including sessions belonging to a role they
security risk. have the privileges of), so it should not represent a security risk.
Only superusers can change this setting. Only superusers can change this setting.
</para> </para>
</listitem> </listitem>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment