From: PG Bug reporting form <noreply@postgresql.org>
To: pgsql-bugs@lists.postgresql.org
Cc: chaolpan@cisco.com
Subject: BUG #17377: only superusers can query or manipulate replication origins
Date: Sat, 22 Jan 2022 09:12:05 +0000
Message-ID: <17377-edc40f0a4d80eaf8@postgresql.org> (raw)
The following bug has been logged on the website:
Bug reference: 17377
Logged by: James Pang
Email address: chaolpan@cisco.com
PostgreSQL version: 13.4
Operating system: RHEL8.4
Description:
PG 13.4 on RHEL8.4 ,
we have a user with REPLICATION for logical replication , try to handle
"replication change loop back" by set replication origin,
select pg_replication_origin_create('test');
ERROR: only superusers can query or manipulate replication origins
Is it possible to "remove superuser() check" for pg_replication related
functions and view query, we expect any role with replication can
create/drop origin, and roles with pg_monitor can query the progress.
we tested that PG 14.1 works if we grant execution privileges , is it
possible to merge the similar enhancement to Postgresql 13.5 or next minor
version ? so we can use that in pg13 version.
Thanks,
James
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: noreply@postgresql.org, pgsql-bugs@lists.postgresql.org, chaolpan@cisco.com
Subject: Re: BUG #17377: only superusers can query or manipulate replication origins
In-Reply-To: <17377-edc40f0a4d80eaf8@postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox