From: Stephen Frost <sfrost@snowman.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Jacob Champion <champion.p@gmail.com>
Cc: Andrew Dunstan <andrew@dunslane.net>
Cc: Akshat Jaimini <destrex271@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Subject: Re: pg_dump needs SELECT privileges on irrelevant extension table
Date: Wed, 18 Oct 2023 16:11:59 -0400
Message-ID: <ZTA8D6w8Pg3T80CS@tamriel.snowman.net> (raw)
In-Reply-To: <2984517.1697577076@sss.pgh.pa.us>
References: <00d46a48-3324-d9a0-49bf-e7f0f11d1038@timescale.com>
<954419.1679334206@sss.pgh.pa.us>
<eed220a4-c7f3-2164-02f2-b42783694221@timescale.com>
<a185f66f-1edc-426e-41a4-091dad230c75@dunslane.net>
<CAAWbhmjsm+bJrwC1eTGpGk+6MQFG_1vA2g1+Fqa0xE78v1Xncg@mail.gmail.com>
<CAAWbhmi+fu6Aiucjf76Ss2GPEijrz6VLriby1LaG=p9zNTOxZg@mail.gmail.com>
<2905669.1697573572@sss.pgh.pa.us>
<2984517.1697577076@sss.pgh.pa.us>
Greetings,
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> I wrote:
> > Why are we marking extension member objects as being subject to SECLABEL
> > or POLICY dumping? As the comment notes, that isn't really sensible
> > unless what we are dumping is a delta from the extension's initial
> > assignments. But we have no infrastructure for that, and none seems
> > likely to appear in the near future.
>
> Here's a quick patch that does it that way. The test changes
> are identical to Jacob's v3-0001.
What the comment is talking about is that we don't support initial
policies, not that we don't support policies on extension tables at all.
That said ... even the claim that we don't support such policies isn't
supported by code and there are people out there doing it, which creates
its own set of problems (ones we should really try to find solutions to
though..).
This change would mean that policies added by a user after the extension
is created would just be lost by a pg_dump/reload, doesn't it?
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 832B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: sfrost@snowman.net, tgl@sss.pgh.pa.us, champion.p@gmail.com, andrew@dunslane.net, destrex271@gmail.com, pgsql-hackers@lists.postgresql.org
Subject: Re: pg_dump needs SELECT privileges on irrelevant extension table
In-Reply-To: <ZTA8D6w8Pg3T80CS@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox