Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kZyad-0004B5-Bu for pgsql-bugs@arkaria.postgresql.org; Tue, 03 Nov 2020 15:51:19 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kZyab-000055-WA for pgsql-bugs@arkaria.postgresql.org; Tue, 03 Nov 2020 15:51:18 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kZyab-00004y-Q6 for pgsql-bugs@lists.postgresql.org; Tue, 03 Nov 2020 15:51:17 +0000 Received: from dd27502.kasserver.com ([85.13.146.49]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kZyaZ-0004iW-7s for pgsql-bugs@lists.postgresql.org; Tue, 03 Nov 2020 15:51:16 +0000 Received: from [192.168.0.52] (ip-37-201-154-176.hsi13.unitymediagroup.de [37.201.154.176]) by dd27502.kasserver.com (Postfix) with ESMTPSA id 7EF8860CA5BD for ; Tue, 3 Nov 2020 16:51:12 +0100 (CET) To: pgsql-bugs@lists.postgresql.org From: Wolfgang Walther Subject: User with BYPASSRLS privilege can't change password Message-ID: Date: Tue, 3 Nov 2020 16:51:07 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.12.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Hi, observed on PG12.4: CREATE USER alice; SET ROLE alice; ALTER USER alice PASSOWRD 'x'; -- works RESET ROLE; CREATE USER bob BYPASSRLS; SET ROLE bob; ALTER USER bob PASSWORD 'x'; -- ERROR: must be superuser to change bypassrls attribute I would expect bob to be able to change his password here. Best Wolfgang