From: | Noah Misch <noah(at)leadboat(dot)com> |
---|---|
To: | pgsql-bugs(at)lists(dot)postgresql(dot)org |
Cc: | Färber, Franz-Josef (StMUK) <Franz-Josef(dot)Faerber(at)stmuk(dot)bayern(dot)de>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Subject: | Re: Extension pg_trgm, permissions and pg_dump order |
Date: | 2022-05-28 04:51:22 |
Message-ID: | 20220528045122.GA3228881@rfd.leadboat.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-bugs pgsql-general |
On Wed, May 25, 2022 at 10:50:47PM -0700, Noah Misch wrote:
> BEGIN;
> CREATE ROLE limitedrole;
> CREATE SCHEMA ext_trgm;
> CREATE EXTENSION pg_trgm SCHEMA ext_trgm;
> CREATE TABLE x(y text);
> ALTER TABLE x OWNER TO limitedrole;
> CREATE INDEX ON x USING gist(y ext_trgm.gist_trgm_ops);
> ROLLBACK;
> Not too simple, no. The parts of DefineIndex() that execute user code
> (e.g. DefineIndex->ComputeIndexAttrs->CheckMutability) are interspersed with
> the parts that do permissions checks, like the one yielding $SUBJECT at
> DefineIndex->ComputeIndexAttrs->ResolveOpClass->LookupExplicitNamespace. My
> first candidate is to undo the userid switch before the ResolveOpClass() call
> and restore it after. My second candidate is to pass down the userid we want
> used for this sort of permissions check. Depending on the full list of call
> stacks reaching permissions checks, this could get hairy.
While I'd value the opportunity to work on this, there only a 50% chance I
could get it done by 2022-08-01. I've set aside four hours on 2022-06-12 to
see how far I get. For a 95% chance, the date would be 2023-02-01. (I've
already canceled a 2022-07 vacation for the thing taking my time instead;
there's nothing clearly left to cut.) If anyone would like it done faster
than that, I welcome that person taking over.
From | Date | Subject | |
---|---|---|---|
Next Message | Andrey Borodin | 2022-05-28 06:26:55 | Re: BUG #17485: Records missing from Primary Key index when doing REINDEX INDEX CONCURRENTLY |
Previous Message | Andres Freund | 2022-05-27 23:13:32 | Re: BUG #17485: Records missing from Primary Key index when doing REINDEX INDEX CONCURRENTLY |
From | Date | Subject | |
---|---|---|---|
Next Message | 浩辰 何 | 2022-05-28 12:11:57 | Improve configurability for IO related behavoir |
Previous Message | Tom Lane | 2022-05-27 19:32:37 | Re: Extension pg_trgm, permissions and pg_dump order |