public inbox for [email protected]  
help / color / mirror / Atom feed
Latest patches break one of our unit-test, related to RLS
3+ messages / 2 participants
[nested] [flat]

* Latest patches break one of our unit-test, related to RLS
@ 2025-09-04 15:03  Dominique Devienne <[email protected]>
  0 siblings, 1 reply; 3+ messages in thread

From: Dominique Devienne @ 2025-09-04 15:03 UTC (permalink / raw)
  To: pgsql-general

In the same vein as v18betas breaking our unit-tests...
(we still don't understand, haven't looked much though).

OK, above it's about a major upgrade. So that's one thing.

But now, we've ascertain that a particular test is:

OK with 16.9 and 17.5 (we cannot test on beta2 anymore)
KO with 16.10 and 17.6 (and beta3 too, released at the same time)

Which for a minor patch is a surprise to us, not in a good way.

So... Did anything change around RLS in this patch series?
Anything changed around ROLE INHERIT rules?

The symptom is that a LOGIN user lacks ROLEs is used to have.
So perhaps some GRANTs are now silently doing nothing,
for some unknown reasons.

What in these patches could be affecting those areas?

Thanks, --DD






^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: Latest patches break one of our unit-test, related to RLS
@ 2025-09-04 15:18  Laurenz Albe <[email protected]>
  parent: Dominique Devienne <[email protected]>
  0 siblings, 1 reply; 3+ messages in thread

From: Laurenz Albe @ 2025-09-04 15:18 UTC (permalink / raw)
  To: Dominique Devienne <[email protected]>; pgsql-general

On Thu, 2025-09-04 at 17:03 +0200, Dominique Devienne wrote:
> OK with 16.9 and 17.5 (we cannot test on beta2 anymore)
> KO with 16.10 and 17.6 (and beta3 too, released at the same time)
> 
> Which for a minor patch is a surprise to us, not in a good way.
> 
> So... Did anything change around RLS in this patch series?
> Anything changed around ROLE INHERIT rules?
> 
> The symptom is that a LOGIN user lacks ROLEs is used to have.
> So perhaps some GRANTs are now silently doing nothing,
> for some unknown reasons.
> 
> What in these patches could be affecting those areas?

Without a reproducer, that is a wild goose chase.

Yours,
Laurenz Albe






^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: Latest patches break one of our unit-test, related to RLS
@ 2025-09-04 15:28  Dominique Devienne <[email protected]>
  parent: Laurenz Albe <[email protected]>
  0 siblings, 0 replies; 3+ messages in thread

From: Dominique Devienne @ 2025-09-04 15:28 UTC (permalink / raw)
  To: Laurenz Albe <[email protected]>; +Cc: pgsql-general

On Thu, Sep 4, 2025 at 5:18 PM Laurenz Albe <[email protected]> wrote:
> On Thu, 2025-09-04 at 17:03 +0200, Dominique Devienne wrote:
> > OK with 16.9 and 17.5 (we cannot test on beta2 anymore)
> > KO with 16.10 and 17.6 (and beta3 too, released at the same time)
> >
> > Which for a minor patch is a surprise to us, not in a good way.
> >
> > So... Did anything change around RLS in this patch series?
> > Anything changed around ROLE INHERIT rules?
> >
> > The symptom is that a LOGIN user lacks ROLEs is used to have.
> > So perhaps some GRANTs are now silently doing nothing,
> > for some unknown reasons.
> >
> > What in these patches could be affecting those areas?
>
> Without a reproducer, that is a wild goose chase.

Oh, it's easy to reproduce here...
But distilling it down is no small feat.
But this is a patch. Patches are not supposed to break things.






^ permalink  raw  reply  [nested|flat] 3+ messages in thread


end of thread, other threads:[~2025-09-04 15:28 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-09-04 15:03 Latest patches break one of our unit-test, related to RLS Dominique Devienne <[email protected]>
2025-09-04 15:18 ` Laurenz Albe <[email protected]>
2025-09-04 15:28   ` Dominique Devienne <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox