Skip to main content

require_superuser

Function require_superuser 

Source
async fn require_superuser(client: &Client) -> Result<(), CliError>
Expand description

Require the connecting role be a superuser.

setup calls this when RBAC is enabled — phase 4 issues CREATE ROLE and GRANT ... ON SYSTEM (CREATEDB, CREATECLUSTER), both of which require superuser under RBAC. Materialize cloud admin users satisfy this through the cloud RBAC layer; on a self-hosted cluster only mz_system qualifies.

Strict — does not consult RBAC state. Callers that should skip the superuser check when RBAC is off must gate this call themselves with is_rbac_enabled.