Support for ALTER ROLE xxx SET yyy = zzz;

[BennettKnapek]

Hi there,

There is no resource that allows "ALTER ROLE SET = " for use with extensions. Specifically the extension PGAudit (https://www.pgaudit.org/).

This will allow for quicker configuration of these extensions as well as keep all the configuration of a database in one file system rather than having to run these commands after the initial 'terraform apply'.

Please let me know what you think or if this has already been implemented elsewhere.

[vmercierfr]

Hi,

In our use case, we need to enable log_statement for some users.

It will be valuable to have the possibility to set specific settings like ALTER ROLE [user] SET log_statement TO 'all'

[robinjhector]

Hi!

We're also in need of this functionality.
It would be great if you could set a default role, eg ALTER ROLE my_user SET role some_other_role

[ALX-TH]

hi all.
@cyrilgdn you have any plans about this feature request ?

[Anton-Shutik]

This PR makes it easier to add new user parameters + fixes 0-value issue. Probably that will fix that issue as well.

[michaellzc]

Hi @cyrilgdn, we have an use case where we need to automate ALTER ROLE %s BYPASSRLS. The role is managed by another provider, google_sql_user, and GCP API does not support customizing role attribute during creation. We also cannot use postgresql_role to manage the role to grant the BYPASSRLS attribute because it's a special IAM-enabled DB user and it has to go through GCP API.

It would be great to provide an interface in postgresql provider to manage the role attribute of existing DB roles in an unauthoritative fashion. For example:

resource "postgresql_role_attribute" "allow_role_bypassrls" {
    role = "my_role"
    bypass_row_level_security = false
}

If this is acceptable, I am happy to contribute.