Re: Clarification on Role Access Rights to Table Indexes - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Clarification on Role Access Rights to Table Indexes
Date
Msg-id 908583.1739822263@sss.pgh.pa.us
Whole thread Raw
In response to Re: Clarification on Role Access Rights to Table Indexes  (Ayush Vatsa <ayushvatsa1810@gmail.com>)
Responses Re: Clarification on Role Access Rights to Table Indexes
List pgsql-hackers
Ayush Vatsa <ayushvatsa1810@gmail.com> writes:
>> As it stands, a superuser can prewarm an index (because she bypasses all
>> privilege checks including this one), but nobody else can.

> That's not fully true. Any role can prewarm an index if the role has the
> correct privileges.

Ah, right.  An index will have null pg_class.relacl, which'll be
interpreted as "owner has all rights", so it will work for the
table owner too.  Likely this explains the lack of prior complaints.
It's still a poor design IMO.

            regards, tom lane



pgsql-hackers by date:

Previous
From: Sergey Prokhorenko
Date:
Subject: Re: UUID v7
Next
From: "David G. Johnston"
Date:
Subject: Re: UUID v7