We have a PostgreSQL server with multiple databases for different projects. We want to use logical replication on those databases so the applications receive all the changes for their replication slot and publication. Their (or one of their) database roles requires the "replication" permission.

They can only read data from the database for which the replication/publication was created. But this permission enables them to delete any replication slot on the database server - also those that do not "belong" to their database.

Is there any way to grant a user only the ability to receive WAL messages - but not the permission to delete/see other replication slots?

  • 1
    I don't think that is possible today. Commented Feb 5 at 7:27
  • Not the answer I was hoping for but thanks for confirming this!
    – Eleasar
    Commented Feb 5 at 8:23


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.