pg.ddx.io  pgsql-committers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Tomas Vondra <tomas.vondra@2ndquadrant.com>
Cc: Dean Rasheed <dean.a.rasheed@gmail.com>
Cc: Tomas Vondra <tomas.vondra@postgresql.org>
Cc: pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Rework the pg_statistic_ext catalog
Date: Sun, 16 Jun 2019 09:54:40 -0400
Message-ID: <13719.1560693280@sss.pgh.pa.us> (raw)
In-Reply-To: <20190616112021.2mncnuj26sbsbnzx@development>
References: <E1hcHz2-0005mY-5A@gemulon.postgresql.org>
	<8833.1560647898@sss.pgh.pa.us>
	<20156.1560650744@sss.pgh.pa.us>
	<CAEZATCWWX5O57d=MHY=MqyJe-xHG2pbi75LKLjo6aZLP3zsaow@mail.gmail.com>
	<20190616085651.d2hxuiqlojewed5j@development>
	<20190616100328.shl2hhuy2pup6ges@development>
	<20190616112021.2mncnuj26sbsbnzx@development>

Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
> Anyway, I'm wondering if we need the REVOKE/GRANT on pg_statistic_ext at
> all, and if we do if we should just remove the list of columns, and
> grant SELECT on all. All the sensitive columns were moved to another
> catalog, after all.

+1.  Per-column permissions checks seem pointlessly inefficient here.

> That also reminds me the patch should have revoked access to the new
> _data catalog.

Uh ... yeah.

			regards, tom lane





view thread (13+ messages)  latest in thread

Message-ID: <13719.1560693280@sss.pgh.pa.us>
Permalink:  ../13719.1560693280@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/13719.1560693280@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-committers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, tomas.vondra@2ndquadrant.com, dean.a.rasheed@gmail.com, tomas.vondra@postgresql.org, pgsql-committers@lists.postgresql.org
  Subject: Re: pgsql: Rework the pg_statistic_ext catalog
  In-Reply-To: <13719.1560693280@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox