Re: Clarification on Role Access Rights to Table Indexes

From: Nathan Bossart <nathandbossart(at)gmail(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Ayush Vatsa <ayushvatsa1810(at)gmail(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>, "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Clarification on Role Access Rights to Table Indexes
Date: 2025-09-24 16:52:09
Message-ID: aNQhuRQfD3PlpeuT@nathan
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

On Wed, Sep 24, 2025 at 12:13:34PM -0400, Tom Lane wrote:
> Nathan Bossart <nathandbossart(at)gmail(dot)com> writes:
>> * RangeVarCallbackForReindexIndex() was checking privileges on the table
>> before locking it, so I reversed it in 0002.
>
> Don't we do that intentionally, to make sure someone can't cause DOS
> on a table they have no privileges on?

Ah, right. I switched it back in v4.

--
nathan

Attachment Content-Type Size
v4-0001-fix-priv-checks-in-stats-code.patch text/plain 1.1 KB
v4-0002-fix-priv-checks-in-index-code.patch text/plain 2.7 KB
v4-0003-fix-priv-checks-in-pg_prewarm.patch text/plain 4.4 KB

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Samuel Marks 2025-09-24 17:02:42 Re: How do I upsert depending on a second table?
Previous Message David G. Johnston 2025-09-24 16:51:34 Re: How do I upsert depending on a second table?

Browse pgsql-hackers by date

  From Date Subject
Next Message Melanie Plageman 2025-09-24 17:07:46 Re: eliminate xl_heap_visible to reduce WAL (and eventually set VM on-access)
Previous Message Tom Lane 2025-09-24 16:49:14 Re: RFC: extensible planner state