| From: | "Hayato Kuroda (Fujitsu)" <kuroda(dot)hayato(at)fujitsu(dot)com> |
|---|---|
| To: | 'Fujii Masao' <masao(dot)fujii(at)gmail(dot)com> |
| Cc: | PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org> |
| Subject: | RE: Validate SERVER subscription conninfo during ALTER SUBSCRIPTION ... OWNER TO |
| Date: | 2026-07-21 09:45:20 |
| Message-ID: | OS9PR01MB12149BDFBF1DCAC4B160A5E6BF5C22@OS9PR01MB12149.jpnprd01.prod.outlook.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Dear Fujii-san,
> While tryng the new v19 feature CREATE/ALTER SUBSCRIPTION ... SERVER,
> I found that ALTER SUBSCRIPTION ... OWNER TO can change the effective
> conninfo for a SERVER subscription, but does not validate the new owner's
> generated conninfo with walrcv_check_conninfo().
> As a result, the owner of a SERVER subscription with password_required=true
> can be changed to a non-superuser whose generated connection string does not
> contain a password.
Not sure, but can we also meet the similar situation via ALTER USER MAPPING
... (DROP password) command? I.e., the command would succeed but the worker
will fail.
If so, should we also fix the case? Or it's something like "Don't do that" situation?
Best regards,
Hayato Kuroda
FUJITSU LIMITED
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bertrand Drouvot | 2026-07-21 09:46:09 | Re: Fix races conditions in DropRole() and GrantRole() |
| Previous Message | Matthias van de Meent | 2026-07-21 09:41:58 | Re: Unexpected behavior after OOM errors |