pgsql: Fix superuser concurrent refresh of matview owned by another. - Mailing list pgsql-committers

From Kevin Grittner
Subject pgsql: Fix superuser concurrent refresh of matview owned by another.
Date
Msg-id E1XMIIz-0003St-9I@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Fix superuser concurrent refresh of matview owned by another.

Use SECURITY_LOCAL_USERID_CHANGE while building temporary tables;
only escalate to SECURITY_RESTRICTED_OPERATION while potentially
running user-supplied code.  The more secure mode was preventing
temp table creation.  Add regression tests to cover this problem.

This fixes Bug #11208 reported by Bruno Emanuel de Andrade Silva.

Backpatch to 9.4, where the bug was introduced.

Branch
------
REL9_4_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/06414c0f68e9f8039c1de40d009f12fa96c49192

Modified Files
--------------
src/backend/commands/matview.c        |   93 ++++++++++++++++-----------------
src/test/regress/expected/matview.out |   12 +++++
src/test/regress/sql/matview.sql      |   13 +++++
3 files changed, 70 insertions(+), 48 deletions(-)


pgsql-committers by date:

Previous
From: Kevin Grittner
Date:
Subject: pgsql: Fix superuser concurrent refresh of matview owned by another.
Next
From: Robert Haas
Date:
Subject: pgsql: Fix typo in b34e37bfefbed1bf9396dde18f308d8b96fd176c.