RE: Validate SERVER subscription conninfo during ALTER SUBSCRIPTION ... OWNER TO - Mailing list pgsql-hackers

From Hayato Kuroda (Fujitsu)
Subject RE: Validate SERVER subscription conninfo during ALTER SUBSCRIPTION ... OWNER TO
Date
Msg-id OS9PR01MB12149BDFBF1DCAC4B160A5E6BF5C22@OS9PR01MB12149.jpnprd01.prod.outlook.com
Whole thread
List pgsql-hackers
Dear Fujii-san,

> While tryng the new v19 feature CREATE/ALTER SUBSCRIPTION ... SERVER,
> I found that ALTER SUBSCRIPTION ... OWNER TO can change the effective
> conninfo for a SERVER subscription, but does not validate the new owner's
> generated conninfo with walrcv_check_conninfo().
> As a result, the owner of a SERVER subscription with password_required=true
> can be changed to a non-superuser whose generated connection string does not
> contain a password.

Not sure, but can we also meet the similar situation via ALTER USER MAPPING
... (DROP password) command? I.e., the command would succeed but the worker
will fail.
If so, should we also fix the case? Or it's something like "Don't do that" situation?

Best regards,
Hayato Kuroda
FUJITSU LIMITED


pgsql-hackers by date:

Previous
From: Matthias van de Meent
Date:
Subject: Re: Unexpected behavior after OOM errors
Next
From: Bertrand Drouvot
Date:
Subject: Re: Fix races conditions in DropRole() and GrantRole()