public inbox for [email protected]  

help / color / mirror / Atom feed

From: Long76 <[email protected]>
To: Pierre Forstmann <[email protected]>
Cc: David G. Johnston <[email protected]>
Cc: [email protected] <[email protected]>
Subject: Re: BUG #19379: Role pg_read_all_data don't allowed read large objects
Date: Thu, 15 Jan 2026 18:56:56 +0300
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
	<CAKFQuwZbtoAs1Ew62aC25R1r7i=M1J_3UmCsssidwDn2Xe6XhA@mail.gmail.com>
	<[email protected]>


Thanks for answers.
Maybe pg_read_all_data without read lo don't allow read all data because need read lo.It's makes role pg_read_all_data useless.
 
I hope for a speedy fix.
 
>Четверг, 15 января 2026, 16:47 +03:00 от Pierre Forstmann < [email protected] >:
> 
>It could be interesting to have a new predefined role pg_read_all_lo to be able to read all LO.
>Maybe it could be done with an extension with some background task to take into account newly created LO but it should be easier to have this coded without an extension.
>Le 15/01/2026 à 14:36, David G. Johnston a écrit :
>>On Thursday, January 15, 2026, PG Bug reporting form < [email protected] > wrote:
>>>The following bug has been logged on the website:
>>>
>>>Bug reference:      19379
>>>Logged by:          Misha Shaygu
>>>Email address:       [email protected]
>>>PostgreSQL version: 17.7
>>>Operating system:   Kubuntu 24.04
>>>Description:       
>>>
>>>My goal: create role for backup any database on server
>>>
>>>Steps:
>>>1. CREATE USER backup_user;
>>>2. GRANT pg_read_all_data TO backup_user;
>>>3. pg_dump my_db
>>>4. got error to read large object
>>>
>>>Following by links
>>>https://www.postgresql.org/docs/17/predefined-roles.html
>>>https://www.postgresql.org/docs/17/lo-implementation.html
>>>"SELECT privileges are required to read a large object" and role
>>>"pg_read_all_data" grant it, but it don't work!
>>>
>>>Please fix it, thanks!
>> 
>>The docs you link note that all data is “tables, views, sequences”.  Large objects are not listed.  Maybe that means the name is a bit misleading but it’s working as documented.
>> 
>>Likewise, the LO page doesn’t say anything about read all being applicable.
>> 
>>David J.
>> 
--
Long76

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: BUG #19379: Role pg_read_all_data don't allowed read large objects
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox