Re: BUG #4350: 'select' acess given to views containing "union all" even though user has no grants

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Heikki Linnakangas" <heikki(at)enterprisedb(dot)com>
Cc: "Brendan O'Shea" <boshea(at)akamai(dot)com>, pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #4350: 'select' acess given to views containing "union all" even though user has no grants
Date: 2008-08-14 19:46:53
Message-ID: 14394.1218743213@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

"Heikki Linnakangas" <heikki(at)enterprisedb(dot)com> writes:
> We should use range_table_walker, which knows how to descend into all
> kinds of RTEs...

Yeah, I had been thinking of that but didn't see an easy way to apply
it; of course the answer is to use IncrementVarSublevelsUp_walker
directly as you have here.

Looks good except IncrementVarSublevelsUp_rtable really ought to have
a comment. Please fix that, commit, and backpatch as needed.

regards, tom lane

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Heikki Linnakangas 2008-08-14 20:37:14 Re: BUG #4350: 'select' acess given to views containing "union all" even though user has no grants
Previous Message Tom Lane 2008-08-14 14:46:52 Re: BUG #4355: TOKMAXLEN=10 to short for token strings