Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1raKWi-009G2r-3p for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Feb 2024 19:02:36 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1raKWg-008BtX-Oo for pgsql-hackers@arkaria.postgresql.org; Wed, 14 Feb 2024 19:02:34 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1raKWg-008BtP-Fq for pgsql-hackers@lists.postgresql.org; Wed, 14 Feb 2024 19:02:34 +0000 Received: from mail-il1-x12d.google.com ([2607:f8b0:4864:20::12d]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1raKWb-007CSs-Vx for pgsql-hackers@postgresql.org; Wed, 14 Feb 2024 19:02:33 +0000 Received: by mail-il1-x12d.google.com with SMTP id e9e14a558f8ab-36426ae1c5eso206625ab.3 for ; Wed, 14 Feb 2024 11:02:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1707937347; x=1708542147; darn=postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=HF0m5Ji2TBPVSClPFmDmfIQGnwVq60nMeKslcVwQUkY=; b=iEd2NOhpQ2hgMToRfNlEW1+sJhleFl0pZDUI7kXEYktC3g8RgRZaL6+x8qua4tlbCM 70EsJzJ3J52tn82RiwbKsYtBgJP958jQcxctr8LgtK2ww5uK5MMyaik3oDWT+R/qoYRt KXQXtMzhVyyTJJhdKNi8omJaBGjn8SRpoYJcOHPm1//zYorKVa9xEBltaC+lgMGYss3u 2HMxalFLwGVJYHzy7YYY12BIaTem7zXtJNJ+4TrdL4Hc5YBHry5YJ1uufDXWqxiye0j1 rDV/HsNmRUCtqdpDgb//OzpJKdVjS20ni5gDXdm5v3jkgfsVdBMFEgwRe+nerYFXuJol 5XPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1707937347; x=1708542147; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=HF0m5Ji2TBPVSClPFmDmfIQGnwVq60nMeKslcVwQUkY=; b=HK0++k/oW/+gCan2dWxr5rXWb10f9ewPJ6KZDufY9XdHqQObMVF+XaJavVucCAFwJC cIgxNtWwXPZlPvz+x/LOlqMmv5bSKGOOxpWxWt1rLSMMIeTfrYZLe/NyPsx1speK6M+T POd1sEcaYJe7vTeUyLqnTnQgIN2TtN7NeYU512Dk9Iuh0Pu8GpFDdN/uz/FfZPdCRkiA te6J7WSzK/OY+EP6o58YTaAsY5Pz501CvdLutUNbifawtBSDnCW6I3C0CbhV+iatkDwj RBTiHQcACH3OQwMFAW/4TBA/HqyXklaTJYNBNJxwIgFeequxCLyUTKBo6wPoc+oAGKNI 1mDA== X-Gm-Message-State: AOJu0YybtiQ58d0kO1tZquGMwjyDePsAbdYuNDqg93XwCHMzAqFX3pp7 dkweYUv+wD/5R0XGAaxVY8t7/97V4wGnqGMrjkfa1d5oDjNFIcmv X-Google-Smtp-Source: AGHT+IFAiOoaqNj6aqdtSAn1ExbVeTcGQ8cF+OzkYZPwwvAeZrnX8vsisMj7nVeBhXWtOtp/DpqOPw== X-Received: by 2002:a05:6602:2dcf:b0:7c4:4be7:777 with SMTP id l15-20020a0566022dcf00b007c44be70777mr4237856iow.18.1707937347624; Wed, 14 Feb 2024 11:02:27 -0800 (PST) X-Forwarded-Encrypted: i=1; AJvYcCVv+xbXoBbq3JXqsDgFHlVe0jGT1D1U3WwLt6inYps3oOnpzqFLIWF6YKkgXe/qN0C71/LVVIckzGtgfwbhdxb2xt2QaFwGGsyKRzZynepYKxN3th2DKaNsSw== Received: from nathanxps13 (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id q18-20020a6b7112000000b007c48c59f488sm229164iog.42.2024.02.14.11.02.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Feb 2024 11:02:27 -0800 (PST) Date: Wed, 14 Feb 2024 13:02:26 -0600 From: Nathan Bossart To: Jeff Davis Cc: pgsql-hackers@postgresql.org, Joe Conway , Robert Haas Subject: Re: MAINTAIN privilege -- what do we need to un-revert it? Message-ID: <20240214190226.GA373350@nathanxps13> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, Feb 14, 2024 at 10:20:28AM -0800, Jeff Davis wrote: > If those arguments are still unconvincing, then the next idea is to fix > the search_path for all maintenance commands[3]. I tried this during > the 16 cycle, but due to timing issues it was also reverted. I can > proceed with this approach again, but I'd like a clear endorsement, in > case there were other reasons to doubt the approach. This seemed like the approach folks were most in favor of at the developer meeting a couple weeks ago [0]. At least, that was my interpretation of the discussion. BTW I have been testing reverting commit 151c22d (i.e., un-reverting MAINTAIN) every month or two, and last I checked, it still applies pretty cleanly. The only changes I've needed to make are to the catversion and to a hard-coded version in a test (16 -> 17). [0] https://wiki.postgresql.org/wiki/FOSDEM/PGDay_2024_Developer_Meeting#The_Path_to_un-reverting_the_MAINTAIN_privilege -- Nathan Bossart Amazon Web Services: https://aws.amazon.com