Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mnCIs-0002q7-NC for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Nov 2021 04:12:10 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mnCIq-0003mk-IT for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Nov 2021 04:12:08 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mnCIq-0003mb-6B for pgsql-hackers@lists.postgresql.org; Wed, 17 Nov 2021 04:12:08 +0000 Received: from mail-pj1-x102f.google.com ([2607:f8b0:4864:20::102f]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1mnCIk-0006na-Kr for pgsql-hackers@postgresql.org; Wed, 17 Nov 2021 04:12:06 +0000 Received: by mail-pj1-x102f.google.com with SMTP id cq22-20020a17090af99600b001a9550a17a5so4113138pjb.2 for ; Tue, 16 Nov 2021 20:12:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=j-davis-com.20210112.gappssmtp.com; s=20210112; h=message-id:subject:from:to:cc:date:in-reply-to:references :mime-version:content-transfer-encoding; bh=Yeds/WATRz5xP734LSc2IPirGje2LieitYWVdVngV1Q=; b=cY6bzVIuSVQKxQ3APLS6JBPXD4zsVSRM8o1LVDNaA/1qrW1sn76Ks252lJS8UNDYso kdsqrmonfIXORWgvmS1W5sdkATVghVuDNyQW1zdn+/rrFpq5+6Dw0OPsUznNbad9+Ne2 IuQxCRn+yngQulAxJP2LaEdrBhbnsPb3E1+c96wF5Gn0TpXEXJ/aqgWIYIs3+zj+YbbH OpQRGEEYXv4KJfnTx7SRANV1SLqXwxEiiBVjtHQCogZDnK9O9Ey3HD6ARFu4dGDQKxcu J1zZ7wubeVAA5z1B90PsybVBxe9MdOdl7AVAOCK4Zy1p1R7Xidqkfdeo9NxFEjQxvgXj 5Mmg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:subject:from:to:cc:date:in-reply-to :references:mime-version:content-transfer-encoding; bh=Yeds/WATRz5xP734LSc2IPirGje2LieitYWVdVngV1Q=; b=NzDPtH6yejMZKe/wjfYpImSUl1o7qtoFiJzAqNVNSZpjzhNFXtkClwVGPjwg2X8vkG wwP6Cbyj49bhN8ZDzboaV9edHaxa9iE6bV+TqwJ2Dy9O0y8WDi+a3vBS0lqNo56FLpUw OeWfDKs7H28+oVgwIp8tjYoufR1jd8UMnN2YkhDYWtO3rV0vIZbh0hlRdBNcraM8C17Z QhR6IGVUBqquYeDZBPDuSPBegv+BTvU3nQWwU8DArtPoauzWcdJhlpQOZLFiptf/YZLA hnA7mUAwlgwkzsiyYsGq/+SG60NBdY9n3J1bQgb+779D4Pa+Hnmz3qL20hvzyI/O/eLp 7bMw== X-Gm-Message-State: AOAM532albVoKqgOO1LC9vrTQPn7Rr7ohkfG2Ss80omJ2TBOE7AGEuKm CI0D7Z3SnWpi6A2slmoCB6ItbA== X-Google-Smtp-Source: ABdhPJzKGZI2WnzpvxlAKGEohJfSO0VZb55VPYdGHvoKZhHNWXYkraOgbBbG0Wtma7+v+aPlVtRa9A== X-Received: by 2002:a17:90a:df97:: with SMTP id p23mr5722849pjv.3.1637122321539; Tue, 16 Nov 2021 20:12:01 -0800 (PST) Received: from jdavis.lan (c-73-231-146-4.hsd1.ca.comcast.net. [73.231.146.4]) by smtp.gmail.com with ESMTPSA id c1sm22162603pfv.54.2021.11.16.20.12.00 (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 16 Nov 2021 20:12:00 -0800 (PST) Message-ID: Subject: Re: Non-superuser subscription owners From: Jeff Davis To: Mark Dilger , Andrew Dunstan Cc: PostgreSQL-development , Robert Haas Date: Tue, 16 Nov 2021 20:11:59 -0800 In-Reply-To: <6BB4451E-7B1B-474C-BD1F-DB7531E720C6@enterprisedb.com> References: <9DFC88D3-1300-4DE8-ACBC-4CEF84399A53@enterprisedb.com> <6BB4451E-7B1B-474C-BD1F-DB7531E720C6@enterprisedb.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.28.5-0ubuntu0.18.04.2 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, 2021-11-03 at 12:50 -0700, Mark Dilger wrote: > The first two patches are virtually unchanged. The third updates the > behavior of the apply workers, and updates the documentation to > match. v2-0001 corrects some surprises, but may create others. Why is renaming allowed, but not changing the options? What if we add new options, and some of them seem benign for a non-superuser to change? The commit message part of the patch says that it's to prevent non- superusers from being able to (effectively) create subscriptions, but don't we want privileged non-superusers to be able to create subscriptions? Regards, Jeff Davis