Thread: pgsql-server/ oc/src/sgml/ref/grant.sgml oc/sr ...

pgsql-server/ oc/src/sgml/ref/grant.sgml oc/sr ...

From
tgl@svr1.postgresql.org (Tom Lane)
Date:
CVSROOT:    /cvsroot
Module name:    pgsql-server
Changes by:    tgl@svr1.postgresql.org    03/10/31 16:00:49

Modified files:
    doc/src/sgml/ref: grant.sgml revoke.sgml
    src/backend/catalog: aclchk.c

Log message:
    When a superuser does GRANT or REVOKE on an object he doesn't own,
    process the command as though it were issued by the object owner.
    This prevents creating weird scenarios in which the same privileges
    may appear to flow from different sources, and ensures that a superuser
    can in fact revoke all privileges if he wants to.  In particular this
    means that the regression tests work when run by a superuser other than
    the original bootstrap userid.  Per report from Larry Rosenman.