From: Bruce Momjian <bruce@momjian.us>
To: Noah Misch <noah@leadboat.com>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: First draft of the PG 15 release notes
Date: Thu, 21 Jul 2022 13:44:13 -0400
Message-ID: <YtmQbQtxP2H+irFa@momjian.us> (raw)
In-Reply-To: <Ys3BqwfxDAwCDjES@momjian.us>
References: <20220705195349.GB2648447@rfd.leadboat.com>
<YsSglBBxcPSUDwUb@momjian.us>
<20220705215752.GC2648447@rfd.leadboat.com>
<YsTNqC5QO2666i+G@momjian.us>
<20220706024557.GD2648447@rfd.leadboat.com>
<YsWJ3XYbT7qMfpmy@momjian.us>
<20220710031941.GB2808420@rfd.leadboat.com>
<YsxSXWSS90Yzqqwv@momjian.us>
<20220712063132.GB2937407@rfd.leadboat.com>
<Ys3BqwfxDAwCDjES@momjian.us>
On Tue, Jul 12, 2022 at 02:47:07PM -0400, Bruce Momjian wrote:
> On Mon, Jul 11, 2022 at 11:31:32PM -0700, Noah Misch wrote:
> > On Mon, Jul 11, 2022 at 12:39:57PM -0400, Bruce Momjian wrote:
> > > I had trouble reading the sentences in the order you used so I
> > > restructured it:
> > >
> > > The new default is one of the secure schema usage patterns that <xref
> > > linkend="ddl-schemas-patterns"/> has recommended since the security
> > > release for CVE-2018-1058. The change applies to newly-created
> > > databases in existing clusters and for new clusters. Upgrading a
> > > cluster or restoring a database dump will preserve existing permissions.
> >
> > I agree with the sentence order change.
>
> Great.
>
> > > For existing databases, especially those having multiple users, consider
> > > issuing <literal>REVOKE</literal> to adopt this new default. For new
> > > databases having zero need to defend against insider threats, granting
> > > <literal>USAGE</literal> permission on their <literal>public</literal>
> > > schemas will yield the behavior of prior releases.
> >
> > s/USAGE/CREATE/ in the last sentence. Looks good with that change.
>
> Ah, yes, of course.
Patch applied, I also adjusted the second paragraph to be more
symmetric. You can see the results here:
https://momjian.us/pgsql_docs/release-15.html
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EDB https://enterprisedb.com
Indecision is a decision. Inaction is an action. Mark Batterson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: bruce@momjian.us, noah@leadboat.com
Subject: Re: First draft of the PG 15 release notes
In-Reply-To: <YtmQbQtxP2H+irFa@momjian.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox