pg.ddx.io  pgsql-general@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Nathan Bossart <nathandbossart@gmail.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Ayush Vatsa <ayushvatsa1810@gmail.com>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: David G. Johnston <david.g.johnston@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Clarification on Role Access Rights to Table Indexes
Date: Wed, 24 Sep 2025 11:52:09 -0500
Message-ID: <aNQhuRQfD3PlpeuT@nathan> (raw)
In-Reply-To: <3432170.1758730414@sss.pgh.pa.us>
References: <CACX+KaO4R9QDxbPSxSB0jNXFsqA6Jf=UPS+tyUvT_YvuP_grVA@mail.gmail.com>
	<Z8yxsm9ZWVkHlPbV@nathan>
	<CACX+KaP+6U9jf=GT4wpR7TvRvSMtTAhz=vP2Zr+ZdUFVZzqNsA@mail.gmail.com>
	<Z8y9RTT-vU6oVI_Y@nathan>
	<149429.1741472260@sss.pgh.pa.us>
	<Z8zwVmGzXyDdkAXj@nathan>
	<279947.1741535285@sss.pgh.pa.us>
	<Z88CB-vDehJ9rW8u@nathan>
	<aNQVIVKarUipPcnW@nathan>
	<3432170.1758730414@sss.pgh.pa.us>

On Wed, Sep 24, 2025 at 12:13:34PM -0400, Tom Lane wrote:
> Nathan Bossart <nathandbossart@gmail.com> writes:
>> * RangeVarCallbackForReindexIndex() was checking privileges on the table
>> before locking it, so I reversed it in 0002.
> 
> Don't we do that intentionally, to make sure someone can't cause DOS
> on a table they have no privileges on?

Ah, right.  I switched it back in v4.

-- 
nathan


Attachments:

  [text/plain] v4-0001-fix-priv-checks-in-stats-code.patch (0B, ../aNQhuRQfD3PlpeuT@nathan/2-v4-0001-fix-priv-checks-in-stats-code.patch)
  download

view thread (53+ messages)  latest in thread

Message-ID: <aNQhuRQfD3PlpeuT@nathan>
Permalink:  ../aNQhuRQfD3PlpeuT@nathan/
Also on:    postgresql.org/message-id/aNQhuRQfD3PlpeuT@nathan

 ·  · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-general@postgresql.org
  Cc: nathandbossart@gmail.com, tgl@sss.pgh.pa.us, ayushvatsa1810@gmail.com, robertmhaas@gmail.com, david.g.johnston@gmail.com, pgsql-hackers@postgresql.org
  Subject: Re: Clarification on Role Access Rights to Table Indexes
  In-Reply-To: <aNQhuRQfD3PlpeuT@nathan>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox