Skip site navigation (1) Skip section navigation (2)

Re: BUG #4350: 'select' acess given to views containing "union all" even though user has no grants

From: "Heikki Linnakangas" <heikki(at)enterprisedb(dot)com>
To: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "Brendan O'Shea" <boshea(at)akamai(dot)com>,<pgsql-bugs(at)postgresql(dot)org>
Subject: Re: BUG #4350: 'select' acess given to views containing "union all" even though user has no grants
Date: 2008-08-14 11:56:57
Message-ID: 48A41D89.8030306@enterprisedb.com (view raw or flat)
Thread:
Lists: pgsql-bugs
Tom Lane wrote:
> Probably not.  But it strikes me that there's another sin of omission
> here: function and values RTEs need to be tweaked too, because they
> contain expressions thst could have uplevel Vars in them.  I'm not
> certain such RTEs could appear at top level in a UNION query, but I'm
> not sure they couldn't either.

Hmm. Maybe through a rewrite or something?

We should use range_table_walker, which knows how to descend into all 
kinds of RTEs...

-- 
   Heikki Linnakangas
   EnterpriseDB   http://www.enterprisedb.com

Attachment: fix-union-all-view-perm-5.patch
Description: text/x-diff (7.4 KB)

In response to

Responses

pgsql-bugs by date

Next:From: AbuzarDate: 2008-08-14 12:31:34
Subject: BUG #4354: Text Type converted to Memo
Previous:From: Tom LaneDate: 2008-08-13 13:42:02
Subject: Re: BUG #4350: 'select' acess given to views containing "union all" even though user has no grants

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group