Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1ka1dv-0002uq-Uo
	for pgsql-bugs@arkaria.postgresql.org; Tue, 03 Nov 2020 19:06:55 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.92)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1ka1du-00061r-J3
	for pgsql-bugs@arkaria.postgresql.org; Tue, 03 Nov 2020 19:06:54 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1ka1du-00061j-Cx
	for pgsql-bugs@lists.postgresql.org; Tue, 03 Nov 2020 19:06:54 +0000
Received: from sss.pgh.pa.us ([66.207.139.130])
	by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1ka1dr-0006Jo-Ur
	for pgsql-bugs@lists.postgresql.org; Tue, 03 Nov 2020 19:06:52 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 0A3J6oN9961979;
	Tue, 3 Nov 2020 14:06:50 -0500
From: Tom Lane <tgl@sss.pgh.pa.us>
To: "David G. Johnston" <david.g.johnston@gmail.com>
cc: Stephen Frost <sfrost@snowman.net>,
        Wolfgang Walther <walther@technowledgy.de>,
        PostgreSQL mailing lists <pgsql-bugs@lists.postgresql.org>
Subject: Re: User with BYPASSRLS privilege can't change password
In-reply-to: 
 <CAKFQuwavcOMqc3GqiR9GtHRxVVtUC_9_Eo-mZpwBqPxDiShD5Q@mail.gmail.com>
References: <a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de>
 <923005.1604420579@sss.pgh.pa.us> <956994.1604425451@sss.pgh.pa.us>
 <20201103180641.GX16415@tamriel.snowman.net>
 <CAKFQuwavcOMqc3GqiR9GtHRxVVtUC_9_Eo-mZpwBqPxDiShD5Q@mail.gmail.com>
Comments: In-reply-to "David G. Johnston" <david.g.johnston@gmail.com>
	message dated "Tue, 03 Nov 2020 11:58:39 -0700"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <961977.1604430410.1@sss.pgh.pa.us>
Date: Tue, 03 Nov 2020 14:06:50 -0500
Message-ID: <961978.1604430410@sss.pgh.pa.us>
List-Id: <pgsql-bugs.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-bugs@lists.postgresql.org>
List-Owner: <mailto:pgsql-bugs-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-bugs>
Precedence: bulk

"David G. Johnston" <david.g.johnston@gmail.com> writes:
> Is the nuance that in reality a non-superuser cannot specify BypassRLS even
> if the effective value is unchanged unimportant here?

I was wondering about that.  You could definitely make a case for a
weaker set of rules here.  However, the superuser restriction has been
like that for 15-ish years without much complaint, so it doesn't seem
that it bothers people in practice.

			regards, tom lane