MIME-Version: 1.0
References: <CAFCRh-8NwJd0jq6P=R3qhHyqU7hw0BTor3W0SvUcii24et+zAw@mail.gmail.com>
 <f6184a6d3185c129a053059f1b16b08107ca037b.camel@cybertec.at>
In-Reply-To: <f6184a6d3185c129a053059f1b16b08107ca037b.camel@cybertec.at>
From: Dominique Devienne <ddevienne@gmail.com>
Date: Thu, 4 Sep 2025 17:28:41 +0200
Message-ID: <CAFCRh--CwoXZMq9WcaG7bAQQcQ6F-NZP2Z=PUgwnjKUtTBaz3A@mail.gmail.com>
Subject: Re: Latest patches break one of our unit-test, related to RLS
To: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: pgsql-general@postgresql.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/CAFCRh--CwoXZMq9WcaG7bAQQcQ6F-NZP2Z%3DPUgwnjKUtTBaz3A%40mail.gmail.com>
Precedence: bulk

On Thu, Sep 4, 2025 at 5:18=E2=80=AFPM Laurenz Albe <laurenz.albe@cybertec.=
at> wrote:
> On Thu, 2025-09-04 at 17:03 +0200, Dominique Devienne wrote:
> > OK with 16.9 and 17.5 (we cannot test on beta2 anymore)
> > KO with 16.10 and 17.6 (and beta3 too, released at the same time)
> >
> > Which for a minor patch is a surprise to us, not in a good way.
> >
> > So... Did anything change around RLS in this patch series?
> > Anything changed around ROLE INHERIT rules?
> >
> > The symptom is that a LOGIN user lacks ROLEs is used to have.
> > So perhaps some GRANTs are now silently doing nothing,
> > for some unknown reasons.
> >
> > What in these patches could be affecting those areas?
>
> Without a reproducer, that is a wild goose chase.

Oh, it's easy to reproduce here...
But distilling it down is no small feat.
But this is a patch. Patches are not supposed to break things.