From: Alvaro Herrera <alvherre@2ndquadrant.com>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: allow_system_table_mods stuff
Date: Fri, 13 Sep 2019 18:39:40 -0300
Message-ID: <20190913213940.GA20917@alvherre.pgsql> (raw)
In-Reply-To: <a7455db0-2fc0-4ddc-4d8f-e4c860957a34@2ndquadrant.com>
On 2019-Jun-28, Peter Eisentraut wrote:
> Here is a new patch after the discussion.
>
> - Rename allow_system_table_mods to allow_system_table_ddl.
>
> (This makes room for a new allow_system_table_dml, but it's not
> implemented here.)
>
> - Make allow_system_table_ddl SUSET.
>
> - Add regression test.
>
> - Remove the behavior that allow_system_table_mods allowed
> non-superusers to do DML on catalog tables without further access checking.
>
> I think there was general agreement on all these points.
I think this patch is at a point where it merits closer review from
fellow committers, so I marked it RfC for now. I hope non-committers
would also look at it some more, though.
--
Álvaro Herrera https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: alvherre@2ndquadrant.com, peter.eisentraut@2ndquadrant.com
Subject: Re: allow_system_table_mods stuff
In-Reply-To: <20190913213940.GA20917@alvherre.pgsql>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox