| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | Jordan Gigov <coladict(at)gmail(dot)com> |
| Cc: | Robert Haas <robertmhaas(at)gmail(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>, Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>, Michael Banck <michael(dot)banck(at)credativ(dot)de>, Jim Nasby <Jim(dot)Nasby(at)bluetreble(dot)com>, Kevin Grittner <kgrittn(at)gmail(dot)com>, Pg Hackers <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: Change in "policy" on dump ordering? |
| Date: | 2017-07-26 15:35:55 |
| Message-ID: | 8699.1501083355@sss.pgh.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Jordan Gigov <coladict(at)gmail(dot)com> writes:
> But why should a superuser need the ACL to be applied before being allowed
> access? If you make the permission-checking function check if the user is a
> superuser before looking for per-user grants, wouldn't that solve the issue?
The superuser's permissions are not relevant, because the materialized
view is run with the permissions of its owner, not the superuser.
We are not going to consider changing that, either, because it would open
trivial-to-exploit security holes (any user could set up a trojan horse
matview and just wait for the next pg_upgrade or dump/restore).
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Mengxing Liu | 2017-07-26 15:41:37 | [GSOC] Eliminate O(N^2) scaling from rw-conflict tracking in serializable transactions |
| Previous Message | Kunshchikov Vladimir | 2017-07-26 15:32:33 | Re: [patch] pg_dump/pg_restore zerror() and strerror() mishap |