Allow doing ALTER ROLE .. CONNECTION LIMIT on reserved roles

[Steve Chavez]

Problem

Currently gives an error:

alter role authenticator connection limit 30;

ERROR:  42501: "authenticator" is a reserved role, only superusers can modify it

This is useful for limiting pool connections.

Solution

Allow it.

[Bobbie Soedirgo]

This needs to be more granular, otherwise you'd be able to alter role supabase_admin connection limit 0

[Steve Chavez]

@soedirgo We have an undocumented (pending fix) feature that allows for configurable reserved roles by suffixing them with *, like authenticator here:

reserved_roles="supabase_storage_admin, anon, reserved_but_not_yet_created, authenticator*"

https://github.com/supabase/supautils/blob/master/nix/withTmpDb.sh.in#L18

That should clear your concern right?

[Bobbie Soedirgo]

Hmm yeah, I think that'd work 👍