Re: Extension security improvement: Add support for extensions with an owned schema - Mailing list pgsql-hackers

From Jelte Fennema-Nio
Subject Re: Extension security improvement: Add support for extensions with an owned schema
Date
Msg-id DLPDSPWPW6SS.3KZI2YC6VZVI0@jeltef.nl
Whole thread
In response to Re: Extension security improvement: Add support for extensions with an owned schema  (Manu <manuelreyesbravo@gmail.com>)
Responses Re: Extension security improvement: Add support for extensions with an owned schema
List pgsql-hackers
On Tue Sep 22, 2026 at 10:58 PM CEST, Manu wrote:
>> I also think I changed the pg_upgrade to do the correct thing, but I'm
>> not sure how to test this (even manually). Because part of it would
>> only be relevant once we support upgrading from PG18. So for now the
>> upgrade_code I haven't actually run.
>
> That is still true, and unfortunately that code does not work.

Thank you for testing the patch and finding these issues. And to be
clear I had by this point tested this code manually (but that was a long
time ago) and written regression tests that should catch these issues.

> 1. pg_dump against any older server fails
> ------------------------------------------

Yeah this version number bitrotted over time due to new releases
without this patch in it. Fixed now. (this is a gap in our CI, but the
buildfarm would have caught this quickly after commit)

> 2. Every pg_dump of a database with an owned-schema extension warns
> --------------------------------------------------------------------
>
>   pg_dump: warning: could not resolve dependency loop among these items:
>   pg_dump: detail: EXTENSION loopdemo_owned  (ID 2 OID 16386)
>   pg_dump: detail: SCHEMA loopdemo_owned  (ID 8 OID 16385)

I think this was the best find. Fixed now. And I also included a
separate patch that fails the test_pg_dump regression test if any
warning is emitted by pg_dump/pg_restore so that CI will catch these
kind of failures in the future.

> 3. test_pg_dump cannot be run on its own any more
> --------------------------------------------------
>
>   make -C src/test/modules/test_pg_dump check

Fixed now (needed a small Makefile addition). I think I had only tested
it with meson (and CI runs the full test suite not specific tests).

Attachment

pgsql-hackers by date:

Previous
From: Etsuro Fujita
Date:
Subject: Re: Several issues with postgres_fdw stats import
Next
From: Alexander Lakhin
Date:
Subject: Re: Assert failure in try_nestloop_path()