Request a Demo
Home   >   mailing lists

pageinspect some function no need superuser priv - Mailing list pgsql-hackers

From jian he
Subject pageinspect some function no need superuser priv
Date
Msg-id CACJufxHA74kt6pqJTwKmQ_EzZApJ1fXK2sURESyT=kc71r0E9g@mail.gmail.com
Whole thread Raw
Responses Re: pageinspect some function no need superuser priv
List pgsql-hackers
Tree view 
hi.

just came to my mind.

If you're the table owner, you should be allowed to use get_raw_page (and other
pageinspect module functions)?
We can use RangeVarGetRelidExtended with
RangeVarCallbackOwnsRelation to perform the ownership check.

Attached is a draft POC.
Am I missing anything obvious?
Attachment

pgsql-hackers by date:

Previous
From: Philip Alger
Date:
Subject: Re: [PATCH] Add pg_get_trigger_ddl() to retrieve the CREATE TRIGGER statement
Next
From: Kirill Reshke
Date:
Subject: Re: pageinspect some function no need superuser priv