activate_all_roles_on_login for MariaDB Xpand

USAGE

The activate_all_roles_on_login system variable can be can be set by executing SET GLOBAL:

SET GLOBAL activate_all_roles_on_login = {true | false};

Using SET GLOBAL to set the value of a global variable in Xpand causes a change that will persist on restart.

DETAILS

The activate_all_roles_on_login system variable determines whether to automatically activate roles on login (disabled by default).

This variable isn't specific to LDAP, but can be especially helpful when using LDAP with Xpand.

By default, the Xpand roles derived from LDAP are implicitly granted to the LDAP user on Xpand, but they are not yet activated.

When activate_all_roles_on_login is set to false (the default), the user must explicitly activate these Xpand roles after login with the SET ROLE statement.

When activate_all_roles_on_login is set to true, all of the Xpand roles derived from LDAP are implicitly granted and activated on the LDAP user's SQL session.

This provides a mechanism similar to SET DEFAULT ROLE ALL for LDAP users.

EXAMPLES

To activate all of the user's granted roles upon login (applies to LDAP users and their derived roles):

SET GLOBAL activate_all_roles_on_login = true;

CHANGE HISTORY