Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1txVW9-00AOmk-Hq for pgsql-general@arkaria.postgresql.org; Wed, 26 Mar 2025 18:30:21 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1txVW8-008DdD-5f for pgsql-general@arkaria.postgresql.org; Wed, 26 Mar 2025 18:30:20 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1txVW7-008Dcl-Qa for pgsql-general@lists.postgresql.org; Wed, 26 Mar 2025 18:30:19 +0000 Received: from mout.gmx.net ([212.227.17.22]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1txVW5-001Htf-2g for pgsql-general@lists.postgresql.org; Wed, 26 Mar 2025 18:30:18 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.net; s=s31663417; t=1743013815; x=1743618615; i=karsten.hilbert@gmx.net; bh=lybw5cwc5SqCkm0hPI1MhFEeQoX55ZvUSOKQgSsVCqY=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:Message-ID:References: MIME-Version:Content-Type:In-Reply-To:Content-Transfer-Encoding: cc:content-transfer-encoding:content-type:date:from:message-id: mime-version:reply-to:subject:to; b=XDlZPSOGjJLcVFgYpwx8S1ENM8iRHJFQ3WjR08UBP8f6z8yzsWWo7innQFqyyv4m LV8ZGPi2a3lCYgFMDbX+YNM5dIkKZwJJyMr6LQ1RNgnJNpjnNbYFT9A5FOoIgWN+W TRJMsmMyBBA/VdGsJ9Jk6VywaV4g/ZmDnxUOMhvaBLoypKAmKWV1fG//RMgptyiM0 1Db9kuhDxSTKgIQhPb8TPtOmHu+gogjZ8HirpDmUJ2/xEKj5K3Jb9sMsZ4V0ocw1D OuAUJCk7dWhUFXS8QCr7N/tvDXcnNlTSdo7wvLSZPGH9SzNm3sRPAr3JM8wiT8T+A iXctzz7/E1w2yX+EHQ== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from hermes ([84.190.228.50]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MryXN-1tJGfT3TxF-00jAm1; Wed, 26 Mar 2025 19:30:15 +0100 Received: from ncq by hermes with local (Exim 4.96) (envelope-from ) id 1txVW1-0001tx-1R; Wed, 26 Mar 2025 19:30:13 +0100 Date: Wed, 26 Mar 2025 19:30:13 +0100 From: Karsten Hilbert To: Tom Lane Cc: pgsql-general@lists.postgresql.org Subject: Re: Q on SELECT column list pushdown from view to table Message-ID: References: <1321213.1742943334@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Ma_X_il-Followup-to: d Re_X_turn-receipt-to: Karsten.Hilbert@gmx.net Di_X_sposition-Notification-To: Karsten.Hilbert@gmx.net X-Confi_X_rm-Reading-To: Karsten.Hilbert@gmx.net X-Pri_X_ority: 2 (High) Sender: X-Provags-ID: V03:K1:MeH7YiZS0eqkUY2cObTQklPURHHaXQ++GXgPbNBKVV8j5Qnxm6m a/izhG8GV6eaoYeaOHB9oWJtQfjYtm3nqJ8yihUD2lv7PZ3rj/FDtW8AmAolabn+bYrBsQg S6qzFw69QLfHkqH/sVgiytg3Xiy+UQzA0i21UvU/19WUC3W7eI5trGvhRw91hF2JXimG6uq cExM339NUtCPgKxDSq8rA== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:X5ACVs0ii+Q=;rCKiNQt2Qf3UpLA6o8eaCCAgNqK NOdSV3W1c5ChdLn9ksdvxWYaSbKP84qSDduktOrZ8SJaEUPpxikF2BMBCFd4sb8SXaplrYSVG 6rr6teKkEAR0nUZT99ik1TI2TrlS1Xs6kKQC0TdmZJybT/zZtjH5bf3RMKxNYkK4grftW6yrV 5QSD1HQ5d2ZM+QJSL6eodUYnzOhi6JXQQmxxY1wjHCArpNlDka1X5cg8UAKlacp3pz++8OKLP PUibTYaZ1eADEcJbmyc3j9D17Lc7JudtN08w7QnTf3neu1WXqio3YONN39SjaOZs2ZpXsQYty w0+tZyzFz8jsORlPJe7HF34w9qKUrhaK7BLALoF20UWoAgwqIikbsF6TMfQJLDi64MC3BBvju VDmiYNwGNfGyijXq8d+tgimG1DoOcyWCUrFDTggbP7KMBFINbTS2b1EN+h6ZDPgi6fM6cHFur NLoRdRPKkSwCH2eDZl2FyWBoLsfo2x+L6lUozjG3cQfIzLK6zya4nEIuaCeMxPRmuYK2kKCJJ mmGxDtNMH6U7CKQVmkcwEd+cHbBRIeRbVuj4xw2QSKH/ytVTTvy86XiTu5IEEJiBXaV8TqCmI WqS/DraGUrnaYPETSVT3nwvB0OndtWFHVP62qUc1phZMYG1iHPEBYOo/E1PGKBrZZGXSxn4rA Jf/T6K1TkaFl43xoVrpyU6N2gOLrhM3+VIRxxgw9YGOeXukz+lnHnL3TTl0keTNwqNktUsA2W NIhCeQarr97DaA+eb7E+nV6nYCBetDbFfRxeeG/P2Z+ipJzRcDkB3VEwA7pypLQeu6GmjNQ3F cL9hsgc5KbdqxqB/iyBiGn/aCU5d/kJqNyEP6lf70RnixcEuhYXJuDa7/J9gomAojv55xiyg8 Gqe3X3yK/4tMmjrxDdUcBiTyIDT/usy5bpIJO1l9JIGHBEh1zw366MGPWhr74sZTU4fdEVE56 uaC3cmwcH2EKcnibrRamyxuNWuvgno7uGhLKjr0bSiaghwZ5WsKKwE3BB9lzfONNcmaXTvg8f 47TaOtEnyWE6J03PIuPd6AFM4ZkIrQkQvXoFRLxpau3LBcywkWvwJEqLPdRcB1qkeY1DWZnw3 vJzXtwtz34g0RBRLqmPJ27JOQGoujkDWdSqV0YDqiEEGufv0nTyFW09JoW2WoRPvZJFDdNoT6 652S/FF74wOdfOFz6qB4UWG53594JnqT7mfZle+Y/vt6Uu6OjEHxF3NNkB4kxRJ4ZBnhdsGQw YD7mc8rYKqQT3FFqpAe8DTzvYiacANF7xJjbi3koyob9u3KGLJjAYyYM892jy/SL/VaQGqewv RkJYj5sevM+2/iuiLtWOQlWs+3aFCIFGm3DZcyu9E+ig8qfYa41XtDeu+pYLoroin3ZXwa5GS Qjk0amGhtrulHwyNDPIN5gc3+Tfryr0g+oQGQp0HU6D0Q3Ta/WTKdFDx0bmZfzLcGcvjq56oa AiDAvGA== Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Am Wed, Mar 26, 2025 at 06:24:14PM +0100 schrieb Karsten Hilbert: > > Works fine if you don't mess with the view's security_invoker > > status. > > I know but doing so was kind of the point. > > The views are created by a "database owner" role having > access to all tables. Therefore, roles using the views would > normally gain access to tables they are otherwise not > allowed to read. Or rather, to certain *columns* of tables... Karsten =2D- GPG 40BE 5B0E C98E 1713 AFA6 5BC0 3BEA AC80 7D4F C89B