Bharath Rupireddy <bharath(dot)rupireddyforpostgres(at)gmail(dot)com> writes:
> In case of CTAS with no data, we actually do not insert the tuples
> into the created table, so we can skip checking for the insert
> permissions. Anyways, the insert permissions will be checked when the
> tuples are inserted into the table.
I'd argue this is wrong. You don't get to skip permissions checks
in ordinary queries just because, say, there's a LIMIT 0 on the
query.
regards, tom lane