pg_dump dump catalog ACLs

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: pgsql-hackers(at)postgresql(dot)org
Subject: pg_dump dump catalog ACLs
Date: 2016-03-01 02:20:13
Message-ID: 20160301022013.GZ3127@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

All,

Per discussion about the best approach to reduce the amount of
superuser-only capabilities, this patch modifies pg_dump to dump out
all ACLs which exist on objects in the pg_catalog schema. With this
change, follow-on trivial patches will remove explicit superuser()
checks from functions and replace them with 'REVOKE EXECUTE FROM public'
commands, allowing users to then control what users are allowed to
execute those functions.

Started as a new thread to hopefully gain more interest. Will be
registered in the March commitfest shortly.

Thanks!

Stephen

Attachment Content-Type Size
pg_dump_catalog_acls_v1.patch text/x-diff 81.2 KB

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2016-03-01 02:28:25 Re: [REVIEW] In-core regression tests for replication, cascading, archiving, PITR, etc.
Previous Message Jim Nasby 2016-03-01 01:56:07 Re: dealing with extension dependencies that aren't quite 'e'