Dmitry Yemanov wrote:

>"Roman Rokytskyy" <rrokytskyy@...> wrote:
>
>
>>This fits very well the model where role is specified at connect time.
>>However, if we allow to change the role at runtime, we have either to
>>invalidate all prepared statements or to check the permissions, etc.
>>
>>So, _if_ we consider Jim's proposal for implementation, then also
>>permission management should be changed.
>>
>>
>
>AFAIU his idea, Jim's in favour of invalidating prepared statements.
>
>
>

Nope, he isn't. I have it on very good authority that "Jim" thinks
protections should be checked at prepare time.