Hi hackers,
I found a flaw in the ACL_MAINTAIN comment.
Commands such as VACUUM are listed as commands that are allowed to be
executed by the MAINTAIN privilege.
However, LOCK TABLE is missing from the comment.
> /*
> * Check if ACL_MAINTAIN is being checked and, if so, and not already
> set
> * as part of the result, then check if the user is a member of the
> * pg_maintain role, which allows VACUUM, ANALYZE, CLUSTER, REFRESH
> * MATERIALIZED VIEW, and REINDEX on all relations.
> */
Therefore, shouldn't LOCK TABLE be added to the comment?
Best regards,
Yusuke Sugie
