Re: Privileges and inheritance - Mailing list pgsql-hackers

From Josh Berkus
Subject Re: Privileges and inheritance
Date
Msg-id 4ACA41CC.1050804@agliodbs.com
Whole thread Raw
In response to Re: Privileges and inheritance  (Simon Riggs <simon@2ndQuadrant.com>)
Responses Re: Privileges and inheritance  (Simon Riggs <simon@2ndQuadrant.com>)
List pgsql-hackers
Simon,

> A small addition though, please. This functionality has been available
> since 8.1 and changing things could cause existing people's scripts to
> fail when they upgrade. If we make this change then we should make sure
> that explicitly GRANTing a permission on the child tables does not fail.

You seem to have misunderstood the patch.  We're not disabling the
ability to GRANT permissions on individual child tables.  We're just
disabling the child table permissions check if someone comes in through
the master.

And we'll *definitely* need to warn people about the security implications.

--Josh Berkus




pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: dblink memory leak
Next
From: Joe Conway
Date:
Subject: Re: dblink memory leak