Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1suHCv-005Zce-As for pgsql-hackers@arkaria.postgresql.org; Fri, 27 Sep 2024 20:04:54 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1suHCu-00EQrt-JX for pgsql-hackers@arkaria.postgresql.org; Fri, 27 Sep 2024 20:04:52 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1suHCu-00EQpw-9S for pgsql-hackers@lists.postgresql.org; Fri, 27 Sep 2024 20:04:52 +0000 Received: from mail-io1-xd34.google.com ([2607:f8b0:4864:20::d34]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1suHCr-001MyD-Rh for pgsql-hackers@postgresql.org; Fri, 27 Sep 2024 20:04:51 +0000 Received: by mail-io1-xd34.google.com with SMTP id ca18e2360f4ac-8324124a172so129401039f.2 for ; Fri, 27 Sep 2024 13:04:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1727467489; x=1728072289; darn=postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=oBzhah9JReT1AzUOusx2GLt8AKK9k5B1gfQX8ATzRTs=; b=hzzy7+3auNl5uEykTZIC9VPpu5gsgANzGxvJB6mNYBllHecA++FshYtY+CaSXwMRK+ pLldDSJOdM9zgfE7X96qCkG18iawxqvUr6hCKbLfnY8ODw1XMVhnH3yiQS/6UDPKX1mM HJ4YlyZjWPcFq963InYvdEEvJT/X/OyC4T+qBaQrMEsf+Y4x2hED4wzSljS15swyWXDu Ya3jIUB8y/9V+X7fLQTxDQLauv7wn7JHfFGl71KlC8ZVRRBYnbDjp7EWfNjRVjcOjcPJ rhN+JvfYgvkJ0Ahq3HQYEWtrndUHM1JkME/usJVTmjI4kvjBpj7yM2EyIFzXsGqZFH8w bH9w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1727467489; x=1728072289; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=oBzhah9JReT1AzUOusx2GLt8AKK9k5B1gfQX8ATzRTs=; b=lXtK5KtLQT6AjlP70KOEszsWhmtakGvjVFCNrr6BrQXNx/zavoXw052Da7ROsqH20l cEeODxwsWuSt2lJDTtOc8N4myVhTqzf6TAZLWgfvD6hj0wEvgPVqMflfuax5Rgy67QBX EZ9sm5nETBsPDHX7wGNABj98YV2cfxUvMTD/KCszJHxs0TNfuXg4kth30ilIecBvZ35c +oVTAWfrZ7TxRs9Gg5M5IZH3a5nUK3ZAU/rN5YMWC9kIuXL/mWLQJQoEsvsk+uwaMpnm bqEXzOeImYIiUp9MaHm7or7Y5o7JOsiCpeAuyTDtJAGSeNcEDsml1cnCeWkKjykM0DVh Fa7Q== X-Forwarded-Encrypted: i=1; AJvYcCWTzNLntk/gF7izeJXrTvgaVCnp0IlBOdkWshLgUlhpYCR14ysDR+zPdkITBVXyFa0+UxUUgbn8GwoDHYpr@postgresql.org X-Gm-Message-State: AOJu0Yx8HxCKrSTiWCQFWJFcAijHYUFWSAYSS48OU5nIqOZh8Ep5ILsC vsPj9ucQ4np61HRroFGrQOhBH492J5UPVbQ6S7g6X3SZMiLbNQjT X-Google-Smtp-Source: AGHT+IENq75k0YUiMdtOcEHdCzx4AjeAG7WIFntQ6Z/IzwmoD89arhPPMuV5ax82WM2dZaG/pUmStg== X-Received: by 2002:a05:6602:2b04:b0:82d:96a:84f4 with SMTP id ca18e2360f4ac-8349318d38amr547989639f.1.1727467489055; Fri, 27 Sep 2024 13:04:49 -0700 (PDT) Received: from nathan (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id ca18e2360f4ac-8349373115asm69679039f.52.2024.09.27.13.04.47 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 27 Sep 2024 13:04:48 -0700 (PDT) Date: Fri, 27 Sep 2024 15:04:46 -0500 From: Nathan Bossart To: Jeff Davis Cc: Yugo NAGATA , Noah Misch , Michael Paquier , pgsql-hackers@postgresql.org, Joe Conway , Robert Haas Subject: Re: MAINTAIN privilege -- what do we need to un-revert it? Message-ID: References: <20240726122630.70e889f63a4d7e26f8549de8@sraoss.co.jp> <20240731182012.45d8231608896732395fc81a@sraoss.co.jp> <6bf8a76ebf3215d2226dbc2245d351aae577e4c1.camel@j-davis.com> <20240802161301.d975daca9ba7a706fa05ecd7@sraoss.co.jp> <20240805160502.d2a4975802a832b1e04afb80@sraoss.co.jp> <20240927124234.c5c18d6448c98b52fad62834@sraoss.co.jp> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, Sep 27, 2024 at 09:22:48AM -0700, Jeff Davis wrote: > I suggest that we add the wording to the > query portion of the doc, near "security- > restricted operation". How does this look? diff --git a/doc/src/sgml/ref/create_materialized_view.sgml b/doc/src/sgml/ref/create_materialized_view.sgml index 0d2fea2b97..62d897931c 100644 --- a/doc/src/sgml/ref/create_materialized_view.sgml +++ b/doc/src/sgml/ref/create_materialized_view.sgml @@ -143,7 +143,9 @@ CREATE MATERIALIZED VIEW [ IF NOT EXISTS ] table_name A SELECT, TABLE, or VALUES command. This query will run within a security-restricted operation; in particular, calls to functions that - themselves create temporary tables will fail. + themselves create temporary tables will fail. Also, while the query is + running, the is temporarily changed to + pg_catalog, pg_temp. -- nathan