Skip site navigation (1) Skip section navigation (2)

Re: [COMMITTERS] pgsql-server/src/backend/catalog aclchk.c

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: [COMMITTERS] pgsql-server/src/backend/catalog aclchk.c
Date: 2003-10-06 07:13:33
Message-ID: 20598.1065424413@sss.pgh.pa.us (view raw or flat)
Thread:
Lists: pgsql-committerspgsql-hackers
Peter Eisentraut <peter_e(at)gmx(dot)net> writes:
> Tom Lane writes:
>> But I wonder how this squares with the SQL spec...

> The root of this problem is that revoking privileges from the owner
> doesn't square with the SQL spec in the first place.  Allowing having a
> grant option without the privilege is not a state that's supported by the
> SQL standard, but it just continues the practice we've always had.

[ digs in spec for awhile ]  Okay, I think I see.  The SQL92 spec
defines an owner's privileges (both plain and grant-option) as being
granted to him by the magic wizard role _SYSTEM.  Since the owner isn't
_SYSTEM, he can't revoke any of his own privileges.

We've always allowed an owner to revoke his own ordinary privileges,
and this seems to be useful and problem-free even if the SQL spec's
worldview doesn't allow it.  But we haven't allowed an owner to revoke
his own grant-option privileges, and since SQL92 doesn't either, there
is no reason we shouldn't backpedal at the first sign of trouble with
that feature.

Do any comparable issues arise for other users who've been granted
rights by the owner?  Offhand I don't see any, but...

			regards, tom lane

In response to

pgsql-hackers by date

Next:From: Michael MeskesDate: 2003-10-06 07:28:00
Subject: Re: Day of week question
Previous:From: Christopher Kings-LynneDate: 2003-10-06 07:13:32
Subject: Missing error condition in CREATE TABLE

pgsql-committers by date

Next:From: Peter Eisentraut - PostgreSQLDate: 2003-10-06 16:31:17
Subject: pgsql-server/src bin/psql/nls.mk bin/scripts/n ...
Previous:From: Michael MeskesDate: 2003-10-06 06:44:55
Subject: pgsql-server/src/interfaces/ecpg ChangeLog com ...

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group