Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
> Anyway, I'm wondering if we need the REVOKE/GRANT on pg_statistic_ext at
> all, and if we do if we should just remove the list of columns, and
> grant SELECT on all. All the sensitive columns were moved to another
> catalog, after all.
+1. Per-column permissions checks seem pointlessly inefficient here.
> That also reminds me the patch should have revoked access to the new
> _data catalog.
Uh ... yeah.
regards, tom lane