Re: ALTER DEFAULT PRIVILEGES FOR ROLE is broken - Mailing list pgsql-hackers

From Robert Haas
Subject Re: ALTER DEFAULT PRIVILEGES FOR ROLE is broken
Date
Msg-id CA+TgmobuWprsocu3R0JEzoRG4PoYEgH=_wJaKErtMxQH=3njQg@mail.gmail.com
Whole thread Raw
In response to Re: ALTER DEFAULT PRIVILEGES FOR ROLE is broken  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
On Fri, Jun 7, 2013 at 12:44 PM, Stephen Frost <sfrost@snowman.net> wrote:
> * Tom Lane (tgl@sss.pgh.pa.us) wrote:
>> Essentially the argument for allowing this without a permissions check
>> is "I'm not really doing anything to the schema, just preconfiguring the
>> rights that will be attached to a new object if I later (successfully)
>> create one in this schema".
>
> Makes sense to me; if we were going to do something, I'd say a warning
> would be better, but I'm alright with nothing too.

I vote for nothing.  I always thought that check was wrong-headed.

>> Thoughts?  If we change this, should we back-patch it?  I'm inclined to
>> think it's a bug (especially if the restore-ordering hazard is real)
>> so we should back-patch.
>
> Agreed.

Seems reasonable.

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Hard limit on WAL space used (because PANIC sucks)
Next
From: Alvaro Herrera
Date:
Subject: Re: SPGist "triple parity" concept doesn't work