Commit 5a2fed911a broke parallel query - Mailing list pgsql-bugs

From Laurenz Albe
Subject Commit 5a2fed911a broke parallel query
Date
Msg-id 8befc845430ba1ae3748af900af298788e579c89.camel@cybertec.at
Whole thread Raw
Responses Re: Commit 5a2fed911a broke parallel query
List pgsql-bugs
This is a script to reproduce the problem:

  CREATE ROLE fluff;
  CREATE ROLE duff LOGIN IN ROLE fluff;
  CREATE DATABASE scratch OWNER duff;
  REVOKE CONNECT, TEMP ON DATABASE scratch FROM PUBLIC;

  \c scratch duff
  CREATE TABLE large AS SELECT id FROM generate_series(1, 500000) AS id;
  GRANT SELECT ON large TO fluff;

  SET ROLE fluff;
  SELECT count(*) FROM large;

Since commit 5a2fed911a, this results in:

  ERROR:  permission denied for database "scratch"
  DETAIL:  User does not have CONNECT privilege.
  CONTEXT:  parallel worker

The following patch makes the problem disappear, but I am far
from certain that using the session user is always correct there:

diff --git a/src/backend/utils/init/postinit.c b/src/backend/utils/init/postinit.c
index a024b1151d0..150ec3f52f8 100644
--- a/src/backend/utils/init/postinit.c
+++ b/src/backend/utils/init/postinit.c
@@ -360,7 +360,7 @@ CheckMyDatabase(const char *name, bool am_superuser, bool override_allow_connect
          * and save a few cycles.)
          */
         if (!am_superuser &&
-            object_aclcheck(DatabaseRelationId, MyDatabaseId, GetUserId(),
+            object_aclcheck(DatabaseRelationId, MyDatabaseId, GetSessionUserId(),
                             ACL_CONNECT) != ACLCHECK_OK)
             ereport(FATAL,
                     (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),

Yours,
Laurenz Albe



pgsql-bugs by date:

Previous
From: PG Bug reporting form
Date:
Subject: BUG #18751: Sub-optimal UNION ALL plan
Next
From: Kirill Reshke
Date:
Subject: Re: BUG #18751: Sub-optimal UNION ALL plan