Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tkQM2-003nza-Sq for pgsql-hackers@arkaria.postgresql.org; Tue, 18 Feb 2025 16:21:50 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tkQM1-00C0ew-Ie for pgsql-hackers@arkaria.postgresql.org; Tue, 18 Feb 2025 16:21:49 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tkQM1-00C0dt-8w for pgsql-hackers@lists.postgresql.org; Tue, 18 Feb 2025 16:21:49 +0000 Received: from mail-ej1-x631.google.com ([2a00:1450:4864:20::631]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1tkQLy-001Xz3-2v for pgsql-hackers@postgresql.org; Tue, 18 Feb 2025 16:21:48 +0000 Received: by mail-ej1-x631.google.com with SMTP id a640c23a62f3a-abb8045c3f3so375900966b.2 for ; Tue, 18 Feb 2025 08:21:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1739895705; x=1740500505; darn=postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=1Pt3HMDCQ9u7uZUw8PcuZDFa1KpaCXRxMFEzaer7qbE=; b=dDDuy0T2oPyW3UoBoVcMeb8JB6zk9frSkZ6GgR9cI9x1FDY68/WQprUCM5U7bfbRSn TZvWJY2k5TIt9HdE/vRuMsvuWTB9XPOiTU5Dp52IxdIZtmmh3O4cZdTtvKE375WEKQJ7 XTo3ihM7vvtlr9ibekpP/LsKigTBLfPN1prjMTtqroGo2QPf0ZtZqVpGX+MH9H21euml Vxks2cuorOiI8LNdZQR23eGeX258Awhv5Nzb3vFBjZzDvgYzIIuJJo9LZ8k0zT6scUQd xjnQX/lZvXiQzo4Ewnyp123/rTE+AXkUfLZpjbcMwHU169kW+DMZNUOiA8fjgO4G2pwm Rfpw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1739895705; x=1740500505; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=1Pt3HMDCQ9u7uZUw8PcuZDFa1KpaCXRxMFEzaer7qbE=; b=MDrUBm1BBaa0ltJu1HcL7JyIHKe+ov2JxC2jIyGDdPmpmlV0WQwpqbA8c76oghX0yM eoEvcoThbpraGeIL4kBQMh2ZSWzJCUg/xIWLHbZmtlCpJUlFzaGVJv5NCObjSj5/gx96 Z66h66CFcI6DsYTVfMzFDxoI7f1mS3CjirAwmyaklUDIeY17fxe3qxnJzFAPeRvx3Pm5 xjGdeeGdLsy2+Uw0k4a9/wtRbkaK9rnyukWCeF93XpQSO/8Zza3cvxw/kJRV6uJrYsRI Y0r9/8MeMI6NxC3ZPW/6qINLHUUPgtDkbrMco5Sd3cbbTRUeMx1cXtyMVNq42JKqoxWi 1ZVg== X-Forwarded-Encrypted: i=1; AJvYcCWswnscvqcK7P6SoyXmC6nwbun4PQU/6CX5xPplFHBrnMb4/Uu7puxTszu7qwGF/3HgdfRYLhbS9bKSMRtl@postgresql.org X-Gm-Message-State: AOJu0YyWjO9p++MkLlvaJ0ihkUZfUaZH128i6iNO9VobgUcTFD6m43wn PX+AuJMDgHOSHWijcL3ukEQsrJKN64K9XXyj2UUGWA2yIpIZvkmW3bK6I5uC3x7ZRO2SdowbDcq MKps/Ofw+oCSI5eCVlrAowxmszhH+hg== X-Gm-Gg: ASbGncsm1jEqRp00Z2pPbDgy4wK5Mf0FGH4ESyw22PlxF6VH+MTjWSUzT+bj5MJP3n7 1/r81gaz192XTImbhTc8z/tSE6yZSSfG4REzx5nSyfA67di51IgBKqDjyerQ7ZyQFE5K4FI2O X-Google-Smtp-Source: AGHT+IFftc2S270CsEDFtFZPeGggnm6jXWva9VL+SI7TcJLFdwH64Yd8ci5A/PzSmFRiJd5z7zdJbnrVQbSBeAwGIyw= X-Received: by 2002:a17:906:32d4:b0:ab7:be81:8944 with SMTP id a640c23a62f3a-abbccc4f35fmr28604366b.6.1739895705224; Tue, 18 Feb 2025 08:21:45 -0800 (PST) MIME-Version: 1.0 References: <855988.1739816850@sss.pgh.pa.us> <861660.1739819589@sss.pgh.pa.us> <908583.1739822263@sss.pgh.pa.us> <934709.1739829723@sss.pgh.pa.us> <1243984.1739894558@sss.pgh.pa.us> In-Reply-To: <1243984.1739894558@sss.pgh.pa.us> From: Robert Haas Date: Tue, 18 Feb 2025 11:21:33 -0500 X-Gm-Features: AWEUYZl9lqgbxAI6HgGNKjC_EVjZr48S_7zjREdKsPH4r66_mw8YgdGkM6EHIOM Message-ID: Subject: Re: Clarification on Role Access Rights to Table Indexes To: Tom Lane Cc: "David G. Johnston" , Ayush Vatsa , PostgreSQL Hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Tue, Feb 18, 2025 at 11:02=E2=80=AFAM Tom Lane wrote= : > Is that a +1 for the specific design of "check SELECT on the index's > table", or just a +1 for changing something here? That is a +1 for the specific design of "check SELECT on the index's table". I don't want to be closed-minded: if you have some strong reason for believing that's the wrong thing to do, I'm all ears. However, I'm presently of the view that it is exactly the right thing to do, to the point where I don't currently understand why there's anything to think about here. -- Robert Haas EDB: http://www.enterprisedb.com