| From: | Robert Haas <rhaas(at)postgresql(dot)org> |
|---|---|
| To: | pgsql-committers(at)lists(dot)postgresql(dot)org |
| Subject: | pgsql: doc: Granting TRIGGER or REFERENCES on table is dangerous. |
| Date: | 2026-07-20 18:08:24 |
| Message-ID: | E1wlsPg-000000003dl-3u33@gemulon.postgresql.org |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers |
doc: Granting TRIGGER or REFERENCES on table is dangerous.
It's always been the case that granting these privileges to users that
you don't fully trust was a bad idea, but it hasn't always been
obvious to people reading the documentation that this is the case.
To prevent confusion, and also repeated reports to pgsql-security,
mention it explicitly.
Discussion: http://postgr.es/m/CA+TgmobrjCHBuWHrvX3=2vndUCO2thUOdevrCcMDFW86cqCYvw@mail.gmail.com
Reviewed-by: Nathan Bossart <nathandbossart(at)gmail(dot)com>
Backpatch-through: 14
Branch
------
REL_16_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/cbf2779e70bd18eaab0ccd2eea70bcf8edd37444
Modified Files
--------------
doc/src/sgml/ddl.sgml | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Fujii Masao | 2026-07-20 18:28:05 | pgsql: Fix recovery target test waiting on unavailable WAL |
| Previous Message | Álvaro Herrera | 2026-07-20 15:22:35 | pgsql: Fix restore of partitions with exclusion constraints |