Re: Why is materialized view creation a "security-restricted operation"?

From: Rob Sargent <robjsargent(at)gmail(dot)com>
To: Franz-Josef Färber <Franz-Josef(dot)Faerber(at)stmuk(dot)bayern(dot)de>
Cc: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>, Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>, pgsql-general(at)postgresql(dot)org, Matthias Haupt <Matthias(dot)Haupt(at)stmuk(dot)bayern(dot)de>
Subject: Re: Why is materialized view creation a "security-restricted operation"?
Date: 2026-10-13 15:36:47
Message-ID: 9B7D623E-1DEF-46DC-92B3-FF9452624F5C@gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-general

> On Oct 13, 2026, at 08:17, Färber, Franz-Josef (StMUK) <Franz-Josef(dot)Faerber(at)stmuk(dot)bayern(dot)de> wrote:
>
> 
>>
>> Well, you want to use a materialized view for something that it cannot be used for, for security reasons. We tried to explain that in this thread.
> Yes, you can see it this way: One way would be: Using Temp Tables. This way is blocked due to security reasons. Discussion finished.
>
> Another point of view is:
> 0) The security problem is not inherent for what I was trying to archieve; but due to lack of expressiveness one is forced into this dead end.
> 1) Either: Postgres' COPY stmt lacks the ability to omit the physical table, something like SELECT * FROM COPY FROM ...
> 2) or: Postgres lacks table variables.
>

I am not clear on your workflow so these questions come to mind:
What do you do with the undefined “*” (if it were allowed)?
Would you not have to predefine the columns of the table variable?

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2026-10-13 15:52:14 Re: AW: AW: Why is materialized view creation a "security-restricted operation"?
Previous Message 2026-10-13 14:17:25 AW: AW: Why is materialized view creation a "security-restricted operation"?