I'm testing this extension as it can be really helpful to review privileges.
When using the diffs function i'm using it like this:
SELECT * from public.permission_diffs() WHERE role_name NOT LIKE 'pg_%';
to avoid pg_write_all_data, ... to appear in the output.
Have your consider excluding predefined roles by default?
Or maybe provide a set of INSERT INTO public.permission_target example queries that set the permissions for the predefined roles.
I'm testing this extension as it can be really helpful to review privileges.
When using the diffs function i'm using it like this:
to avoid
pg_write_all_data, ... to appear in the output.Have your consider excluding predefined roles by default?
Or maybe provide a set of
INSERT INTO public.permission_targetexample queries that set the permissions for the predefined roles.