From: Wolfgang Walther <walther@technowledgy.de>
To: pgsql-bugs@lists.postgresql.org
Subject: User with BYPASSRLS privilege can't change password
Date: Tue, 3 Nov 2020 16:51:07 +0100
Message-ID: <a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de> (raw)
Hi,
observed on PG12.4:
CREATE USER alice;
SET ROLE alice;
ALTER USER alice PASSOWRD 'x';
-- works
RESET ROLE;
CREATE USER bob BYPASSRLS;
SET ROLE bob;
ALTER USER bob PASSWORD 'x';
-- ERROR: must be superuser to change bypassrls attribute
I would expect bob to be able to change his password here.
Best
Wolfgang
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: walther@technowledgy.de, pgsql-bugs@lists.postgresql.org
Subject: Re: User with BYPASSRLS privilege can't change password
In-Reply-To: <a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox