pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: Pavel Stehule <pavel.stehule@gmail.com>
Cc: pgsql-hackers@lists.postgresql.org
Subject: Re: Wrong security context for deferred triggers?
Date: Thu, 23 Jan 2025 12:30:48 -0500
Message-ID: <201480.1737653448@sss.pgh.pa.us> (raw)
In-Reply-To: <3e4c8fe7adce2e3956e01bae8f1754830bd2d2bf.camel@cybertec.at>
References: <77ee784cf248e842f74588418f55c2931e47bd78.camel@cybertec.at>
	<dede297a-3d24-7029-dfd9-06aeef8b9766@enterprisedb.com>
	<6f27f51bc98354d7254bbde1c171fa13aca03f28.camel@cybertec.at>
	<77b89e609f21380785865542609fbc14010021c8.camel@cybertec.at>
	<CAFj8pRDcE3+9EM+PSSEW1bHA-EWMAYgVog41q0c47N=Pnq_qiQ@mail.gmail.com>
	<3f0a08f3e3d445137ae287125bc8c1a007045db8.camel@cybertec.at>
	<CAFj8pRCCdL_vB-42161CWxemBVqF75WOq53cMnmRCrzjvKpLOQ@mail.gmail.com>
	<66021ca9d81c4e1a22b6c417659b05424e130f27.camel@cybertec.at>
	<CAFj8pRB1UVUuEh_T7j7XFo8yYDuEYxoUgMhPXbny6dK1eCvgRg@mail.gmail.com>
	<6bca669972ef0d4a665fa83c5b751ab116324f8f.camel@cybertec.at>
	<CAFj8pRDcy2OaPS7OtceFRhTRq6VKWbdnuawgaX3EXMQVwTR4VA@mail.gmail.com>
	<2653121.1730737337@sss.pgh.pa.us>
	<51386e72c47d922ef68eaa67451a52dc3f569843.camel@cybertec.at>
	<3944969.1737570355@sss.pgh.pa.us>
	<3e4c8fe7adce2e3956e01bae8f1754830bd2d2bf.camel@cybertec.at>

Laurenz Albe <laurenz.albe@cybertec.at> writes:
> Version 5 of the patch is attached.

Pushed with some cosmetic adjustments, such as tweaking comments.
One perhaps less than cosmetic adjustment is that I removed the
test case involving dropping the role.  I didn't think it was
buying much now that we removed the code that was trying to do
something special in that situation.  (Perhaps there is an argument
for having some testing of the system's behavior when running as a
dropped role, but I doubt that this is the place to start on that.)

			regards, tom lane





view thread (44+ messages)  latest in thread

Message-ID: <201480.1737653448@sss.pgh.pa.us>
Permalink:  ../201480.1737653448@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/201480.1737653448@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, laurenz.albe@cybertec.at, pavel.stehule@gmail.com, pgsql-hackers@lists.postgresql.org
  Subject: Re: Wrong security context for deferred triggers?
  In-Reply-To: <201480.1737653448@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox