From: Tom Lane <tgl@sss.pgh.pa.us>
To: David G. Johnston <david.g.johnston@gmail.com>
Cc: Stephen Frost <sfrost@snowman.net>
Cc: Wolfgang Walther <walther@technowledgy.de>
Cc: PostgreSQL mailing lists <pgsql-bugs@lists.postgresql.org>
Subject: Re: User with BYPASSRLS privilege can't change password
Date: Tue, 03 Nov 2020 14:06:50 -0500
Message-ID: <961978.1604430410@sss.pgh.pa.us> (raw)
In-Reply-To: <CAKFQuwavcOMqc3GqiR9GtHRxVVtUC_9_Eo-mZpwBqPxDiShD5Q@mail.gmail.com>
References: <a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de>
<923005.1604420579@sss.pgh.pa.us>
<956994.1604425451@sss.pgh.pa.us>
<20201103180641.GX16415@tamriel.snowman.net>
<CAKFQuwavcOMqc3GqiR9GtHRxVVtUC_9_Eo-mZpwBqPxDiShD5Q@mail.gmail.com>
"David G. Johnston" <david.g.johnston@gmail.com> writes:
> Is the nuance that in reality a non-superuser cannot specify BypassRLS even
> if the effective value is unchanged unimportant here?
I was wondering about that. You could definitely make a case for a
weaker set of rules here. However, the superuser restriction has been
like that for 15-ish years without much complaint, so it doesn't seem
that it bothers people in practice.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: tgl@sss.pgh.pa.us, david.g.johnston@gmail.com, sfrost@snowman.net, walther@technowledgy.de, pgsql-bugs@lists.postgresql.org
Subject: Re: User with BYPASSRLS privilege can't change password
In-Reply-To: <961978.1604430410@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox