From: | Nathan Bossart <nathandbossart(at)gmail(dot)com> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | Ayush Vatsa <ayushvatsa1810(at)gmail(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>, "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: Clarification on Role Access Rights to Table Indexes |
Date: | 2025-09-24 16:52:09 |
Message-ID: | aNQhuRQfD3PlpeuT@nathan |
Views: | Whole Thread | Raw Message | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general pgsql-hackers |
On Wed, Sep 24, 2025 at 12:13:34PM -0400, Tom Lane wrote:
> Nathan Bossart <nathandbossart(at)gmail(dot)com> writes:
>> * RangeVarCallbackForReindexIndex() was checking privileges on the table
>> before locking it, so I reversed it in 0002.
>
> Don't we do that intentionally, to make sure someone can't cause DOS
> on a table they have no privileges on?
Ah, right. I switched it back in v4.
--
nathan
Attachment | Content-Type | Size |
---|---|---|
v4-0001-fix-priv-checks-in-stats-code.patch | text/plain | 1.1 KB |
v4-0002-fix-priv-checks-in-index-code.patch | text/plain | 2.7 KB |
v4-0003-fix-priv-checks-in-pg_prewarm.patch | text/plain | 4.4 KB |
From | Date | Subject | |
---|---|---|---|
Next Message | Samuel Marks | 2025-09-24 17:02:42 | Re: How do I upsert depending on a second table? |
Previous Message | David G. Johnston | 2025-09-24 16:51:34 | Re: How do I upsert depending on a second table? |
From | Date | Subject | |
---|---|---|---|
Next Message | Melanie Plageman | 2025-09-24 17:07:46 | Re: eliminate xl_heap_visible to reduce WAL (and eventually set VM on-access) |
Previous Message | Tom Lane | 2025-09-24 16:49:14 | Re: RFC: extensible planner state |