Re: Error from the foreign RDBMS on a foreign table I have no privilege on

From: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
To: Phil Florent <philflorent(at)hotmail(dot)com>, "pgsql-hackers(at)lists(dot)postgresql(dot)org" <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Re: Error from the foreign RDBMS on a foreign table I have no privilege on
Date: 2022-06-07 03:03:00
Message-ID: 7b2414a0622f9f0689cfbad6a5f2cc6bb974e8d5.camel@cybertec.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Sat, 2022-06-04 at 21:18 +0000, Phil Florent wrote:
> I opened an issue with an attached code on oracle_fdw git page : https://github.com/laurenz/oracle_fdw/issues/534
> Basically I expected to obtain a "no privilege" error from PostgreSQL when I have no read privilege
> on the postgres foreign table but I obtained an Oracle error instead.
> Laurenz investigated and closed the issue but he suggested perhaps I should post that on
> the hackers list since it also occurs with postgres-fdw on some occasion(I have investigated some more,
> and postgres_fdw does the same thing when you turn onuse_remote_estimate.). Hence I do...

To add more detais: permissions are checked at query execution time, but if "use_remote_estimate"
is used, the planner already accesses the remote table, even if the user has no permissions
on the foreign table.

I feel that that is no bug, but I'd be curious to know if others disagree.

Yours,
Laurenz Albe

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Justin Pryzby 2022-06-07 03:11:48 Re: [v15 beta] pg_upgrade failed if earlier executed with -c switch
Previous Message houzj.fnst@fujitsu.com 2022-06-07 02:59:31 RE: Support logical replication of DDLs