MIME-Version: 1.0
References: 
 <171085360143.2046436.7217841141682511557.pgcf@coridan.postgresql.org>
 <CA+TgmoY0=bT_xBP8csR=MFE=FxGE2n2-me2-31jBOgEcLvW7ug@mail.gmail.com>
 <CAPpHfdtp3_H_Rp1ubVYGUnnF0fXbam7+OOG_EMnWos1x2a_3Zg@mail.gmail.com>
 <859476bf-3cb0-455e-b093-b8ab5ef17f0e@postgrespro.ru>
 <CA+TgmoZux8hzQ0=1-Rvigm9VuojW0aHiGSzL+G_g43qyrLGiSg@mail.gmail.com>
 <f56c654f-f152-4dc8-b221-4d4484bed612@postgrespro.ru>
 <CAPpHfdtXDuBaHscJn-wada6Kaf3fxmS4k-1TTVhpS+Kx=uveyw@mail.gmail.com>
 <4e2764f7-f6be-478f-8d7f-f921dbd10f5f@postgrespro.ru>
 <CAPpHfdv2V2tsvVn5LYyrJkzmPA==vbdCEKiT8j9yaaiDTfaQtA@mail.gmail.com>
 <ff30dc7e-ebca-42a2-9d49-a66c9a3c7ee5@postgrespro.ru>
 <CALDaNm3V5DQSbZGxhYH+3MMMm-YdgOg+RdJ-ni6D0TZx_=Xd7w@mail.gmail.com>
 <e24af244-887f-4ab9-bc87-8fe315de0077@postgrespro.ru>
 <CACJufxH=O1zR8nMeXcjSiRH6=2qPrD3JgfMapMTeT0D9yam95A@mail.gmail.com>
 <ba5eaa35-cd85-43d6-95b3-8cf211fd6b67@postgrespro.ru>
 <CACJufxE9FDqaE=xbxT-Ujk_G=wW-PeW0TrOB11E8n3-A+FP-GA@mail.gmail.com>
 <4469cb4d-5820-4cc8-9848-7b9b5934a600@postgrespro.ru>
In-Reply-To: <4469cb4d-5820-4cc8-9848-7b9b5934a600@postgrespro.ru>
From: jian he <jian.universality@gmail.com>
Date: Thu, 22 May 2025 10:59:10 +0800
Message-ID: 
 <CACJufxGqtakuKce+k-WNc9hqzaXA86SaKb3_v2qE_fT_1SdDZA@mail.gmail.com>
Subject: Re: Add SPLIT PARTITION/MERGE PARTITIONS commands
To: Dmitry Koval <d.koval@postgrespro.ru>
Cc: pgsql-hackers@lists.postgresql.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CACJufxGqtakuKce%2Bk-WNc9hqzaXA86SaKb3_v2qE_fT_1SdDZA%40mail.gmail.com>
Precedence: bulk

On Thu, May 22, 2025 at 1:01=E2=80=AFAM Dmitry Koval <d.koval@postgrespro.r=
u> wrote:
>
> > for example:
> > ...
>
> If in both examples you replace
>
> create role bob;
>
> with
>
> create role bob SUPERUSER;
>
> and in the second example add "set role bob;" before "alter table ..."
> query, then no error will be occur.
>

That is fine.
superuser can bypass all permission checks.
superuser can attach any table to the partitioned table as he wants.

for example:

begin;
create role alice SUPERUSER;
create role bob SUPERUSER;
GRANT all privileges on schema public to alice;
GRANT all privileges on schema public to bob;
set role bob;
create table at_partitioned (a int, b text) partition by range (a);
set role alice;
create table at_part_2 (b text, a int);
set role bob;
alter table at_partitioned attach partition at_part_2 for values from
(1000) to (2000);
rollback;

Am I missing something?