Date: Sun, 16 Jun 2019 01:24:28 +0200
From: Tomas Vondra <tomas.vondra@2ndquadrant.com>
To: Dean Rasheed <dean.a.rasheed@gmail.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, Stephen Frost <sfrost@snowman.net>,
	Andres Freund <andres@anarazel.de>,
	PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Multivariate MCV stats can leak data to unprivileged users
Message-ID: <20190615232428.eljebxllgkrxt72b@development>
References: <20190519173845.tgf7ku3vigwgndn5@development>
 <2509.1558289694@sss.pgh.pa.us>
 <20190519224459.7dsdnv5gsfmnm4em@development>
 <CAEZATCWdjDpuDkA8xnGzDAAmDekVONj2ZegqdAkjiQE4honh2w@mail.gmail.com>
 <23581.1558359144@sss.pgh.pa.us>
 <CAEZATCXtSSJmZGNiP8N1=hyHhrE3vM6w53qTpoiJgy6Jtai_3g@mail.gmail.com>
 <20190520181714.fm4a4yjtgffh6kst@development>
 <20190606203308.h6rfqzr7jhafgnzd@development>
 <CAEZATCWMjB7i_4TM49036heLPEjRFThPK2HF2sq38nx-aPUrdQ@mail.gmail.com>
 <20190613173745.pjmvxq7x4ceoosck@development>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <20190613173745.pjmvxq7x4ceoosck@development>
User-Agent: NeoMutt/20180716-1444-295967
Precedence: bulk

On Thu, Jun 13, 2019 at 07:37:45PM +0200, Tomas Vondra wrote:
> ...
>
>OK, attached are patches fixing the issues reported by you and John
>Naylor, and squashing the parts into just two patches (catalog split and
>pg_stats_ext). Barring objections, I'll push those tomorrow.
>
>I've renamed columns in the _data catalog from 'stx' to 'stxd', which I
>think is appropriate given the "data" in catalog name.
>
>I'm wondering if we should change the examples in SGML docs (say, in
>planstats.sgml) to use the new pg_stats_ext view, instead of querying the
>catalogs directly. I've tried doing that, but I found the results less
>readable than what we currently have (especially for the MCV list, where
>it'd require matching elements in multiple arrays). So I've left this
>unchanged for now.
>

I've pushed those changes, after adding docs for the pg_stats_ext view.


regards

-- 
Tomas Vondra                  http://www.2ndQuadrant.com
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services