On Wed, Jul 15, 2026 at 6:55 PM Fujii Masao <masao.fujii@gmail.com> wrote
> It's also better to update the following source comment in aclchk.c.
>
> /*
> * Check if ACL_MAINTAIN is being checked and, if so, and not already set
> * as part of the result, then check if the user is a member of the
> * pg_maintain role, which allows VACUUM, ANALYZE, CLUSTER, REFRESH
> * MATERIALIZED VIEW, REINDEX, and LOCK TABLE on all relations.
> */
> if (mask & ACL_MAINTAIN &&
> !(result & ACL_MAINTAIN) &&
> has_privs_of_role(roleid, ROLE_PG_MAINTAIN))
> result |= ACL_MAINTAIN;
Good catch, thanks! I've updated the patch as you said.
--
Best regards,
Shinya Kato
NTT OSS Center