Re: BUG #13694: Row Level Security by-passed with CREATEUSER permission - Mailing list pgsql-bugs

From Stephen Frost
Subject Re: BUG #13694: Row Level Security by-passed with CREATEUSER permission
Date
Msg-id 20151021182619.GX3685@tamriel.snowman.net
Whole thread Raw
In response to Re: BUG #13694: Row Level Security by-passed with CREATEUSER permission  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-bugs
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Joe Conway <mail@joeconway.com> writes:
> > On 10/21/2015 09:42 AM, justin.catterson@sofiebio.com wrote:
> >> Users with the CREATEUSER permission do not evaluate Row Level Security
> >> functions.  pg_user usebypassrls is set to false.
>=20
> > Not a bug. See
> >  http://www.postgresql.org/docs/9.5/static/sql-createrole.html
>=20
> > "CREATEUSER
> > NOCREATEUSER
>=20
> >     These clauses are an obsolete, but still accepted, spelling of
> > SUPERUSER and NOSUPERUSER. Note that they are not equivalent to
> > CREATEROLE as one might naively expect!"
>=20
> I wonder if it's time yet to remove those keywords.  We've had the
> SUPERUSER spelling since 8.1, and this report should remind us that
> people get confused by the old spellings.

Probably past time, considering the obvious confusion to CREATEROLE and
NOCREATEROLE.

Thanks!

Stephen

pgsql-bugs by date:

Previous
From: Tom Lane
Date:
Subject: Re: BUG #13694: Row Level Security by-passed with CREATEUSER permission
Next
From: Andres Freund
Date:
Subject: Re: BUG #13694: Row Level Security by-passed with CREATEUSER permission