public inbox for [email protected]
help / color / mirror / Atom feedpgsql: Fix pg_dump ACL minimization for PROPERTY GRAPH.
2+ messages / 1 participants
[nested] [flat]
* pgsql: Fix pg_dump ACL minimization for PROPERTY GRAPH.
@ 2026-07-07 16:53 Noah Misch <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Noah Misch @ 2026-07-07 16:53 UTC (permalink / raw)
To: [email protected]
Fix pg_dump ACL minimization for PROPERTY GRAPH.
Adding a GRANT caused pg_dump to emit a useless REVOKE + GRANT of owner
privileges, as seen in a dump of the regression database:
REVOKE ALL ON PROPERTY GRAPH graph_rls_schema.cabinet FROM nm;
GRANT ALL ON PROPERTY GRAPH graph_rls_schema.cabinet TO nm;
GRANT ALL ON PROPERTY GRAPH graph_rls_schema.cabinet TO PUBLIC;
For normal dumps, this has no functional consequences. For --no-owner
restores, the extra statements may fail or locate unrelated users of the
destination cluster.
The problem was pg_dump assuming NULL relacl implies acldefault('r'),
the default for TABLE. Fix by teaching acldefault() to retrieve the
PROPERTY GRAPH default ACL. So pg_dump can still dump from 19beta1, use
acldefault('g') for v20+ only. For v19, use a hard-coded snapshot of
the v19 default.
information_schema.pg_property_graph_privileges also misused
acldefault('r'), but its "c.prtype IN ('SELECT')" predicate compensated
for it. Switch to the new acldefault('g') for clarity. Bump catversion
since a new view won't work with old binaries. Back-patch to v19, which
introduced PROPERTY GRAPH.
Reviewed-by: Ashutosh Bapat <[email protected]>
Reviewed-by: Robert Haas <[email protected]>
Discussion: https://postgr.es/m/[email protected]
Backpatch-through: 19
Branch
------
REL_19_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/ccca2cd81b2dab2be7d9d451a84d971a8489ca70
Modified Files
--------------
src/backend/catalog/information_schema.sql | 2 +-
src/backend/utils/adt/acl.c | 3 +++
src/bin/pg_dump/pg_dump.c | 37 +++++++++++++++++++++++++++---
src/include/catalog/catversion.h | 2 +-
4 files changed, 39 insertions(+), 5 deletions(-)
^ permalink raw reply [nested|flat] 2+ messages in thread
* pgsql: Fix pg_dump ACL minimization for PROPERTY GRAPH.
@ 2026-07-07 16:53 Noah Misch <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Noah Misch @ 2026-07-07 16:53 UTC (permalink / raw)
To: [email protected]
Fix pg_dump ACL minimization for PROPERTY GRAPH.
Adding a GRANT caused pg_dump to emit a useless REVOKE + GRANT of owner
privileges, as seen in a dump of the regression database:
REVOKE ALL ON PROPERTY GRAPH graph_rls_schema.cabinet FROM nm;
GRANT ALL ON PROPERTY GRAPH graph_rls_schema.cabinet TO nm;
GRANT ALL ON PROPERTY GRAPH graph_rls_schema.cabinet TO PUBLIC;
For normal dumps, this has no functional consequences. For --no-owner
restores, the extra statements may fail or locate unrelated users of the
destination cluster.
The problem was pg_dump assuming NULL relacl implies acldefault('r'),
the default for TABLE. Fix by teaching acldefault() to retrieve the
PROPERTY GRAPH default ACL. So pg_dump can still dump from 19beta1, use
acldefault('g') for v20+ only. For v19, use a hard-coded snapshot of
the v19 default.
information_schema.pg_property_graph_privileges also misused
acldefault('r'), but its "c.prtype IN ('SELECT')" predicate compensated
for it. Switch to the new acldefault('g') for clarity. Bump catversion
since a new view won't work with old binaries. Back-patch to v19, which
introduced PROPERTY GRAPH.
Reviewed-by: Ashutosh Bapat <[email protected]>
Reviewed-by: Robert Haas <[email protected]>
Discussion: https://postgr.es/m/[email protected]
Backpatch-through: 19
Branch
------
master
Details
-------
https://git.postgresql.org/pg/commitdiff/592de8bd21e177229eeef51cb474ccfc2070c65d
Modified Files
--------------
src/backend/catalog/information_schema.sql | 2 +-
src/backend/utils/adt/acl.c | 3 +++
src/bin/pg_dump/pg_dump.c | 37 +++++++++++++++++++++++++++---
src/include/catalog/catversion.h | 2 +-
4 files changed, 39 insertions(+), 5 deletions(-)
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2026-07-07 16:53 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2026-07-07 16:53 pgsql: Fix pg_dump ACL minimization for PROPERTY GRAPH. Noah Misch <[email protected]>
2026-07-07 16:53 pgsql: Fix pg_dump ACL minimization for PROPERTY GRAPH. Noah Misch <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox