saltstack/salt — pull request #3287 by shadowfax-chc (2013-01-16 02:58:51+00:00)
Title: Added some support for postgres groups to the postgres module

Postgres treats both users and groups as "roles". The only difference is that users can login, while groups cannot. This is an initial pass at adding postgres group support to salt. These functions are not fully "aware" of a postgres group vs. postgres user (ie you could run postgres.group_update on a user and it would still work). Only postgres.user_create and postgres.group_create take advantage of the difference.

I am wondering if we should make salt fully aware of the difference. Should salt verify that the role is a group/user for the corresponding function? (ie before removing a role when postgres.group_remove is called, first salt verifies it is in fact a group?) I should be able to do this if it seems correct.