Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1suDkE-0059ks-IJ for pgsql-hackers@arkaria.postgresql.org; Fri, 27 Sep 2024 16:23:03 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1suDkD-00BjFh-Ch for pgsql-hackers@arkaria.postgresql.org; Fri, 27 Sep 2024 16:23:01 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1suDkC-00BjF8-UO for pgsql-hackers@lists.postgresql.org; Fri, 27 Sep 2024 16:23:01 +0000 Received: from mail-pl1-x62a.google.com ([2607:f8b0:4864:20::62a]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1suDk4-001Nob-0b for pgsql-hackers@postgresql.org; Fri, 27 Sep 2024 16:23:00 +0000 Received: by mail-pl1-x62a.google.com with SMTP id d9443c01a7336-2055a3f80a4so15713455ad.2 for ; Fri, 27 Sep 2024 09:22:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=j-davis-com.20230601.gappssmtp.com; s=20230601; t=1727454171; x=1728058971; darn=postgresql.org; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=OV+clDO6PWC4AO0ViWPUHdQdZAHE3bxZqOvp+ChBgRo=; b=MSUFy9p10xSxPmpxS6vhjfg9mS4mJaA7oi7G8AUyUk+wlSqNCJrlghbj/uCUMwjUJk wGdYdTGlB7dxvDe2ATtw4+ULWwx25MEtJbujSGZvw7HsSN/FtvjeWFR9cCNWnbs/8XwF LR4dJlJ6ti1JB42h9fCuSNWpzMW7rTC1eYco4qtrePFUEaF8/4YXFiya+ohoCFsb1Fk7 StQFSNAB0SfmeStjwVjDCAFYQWJguFbrg0ojnmkwI/J4Txs/OAYTmVHLZ9zxnqIT6t2Z xb1GMVf8Im2ktcH6HaW3b7nhvCNHs9Vitm3CImX13MD/kVwAAzaVZLMQGW476Y+ZCp5d 0Tjw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1727454171; x=1728058971; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=OV+clDO6PWC4AO0ViWPUHdQdZAHE3bxZqOvp+ChBgRo=; b=ln7yvuzE9Au0eBZXgod2CDr4mJWKuk4Pz2J//Y0e0rinKE6dO+mwbBEe3tEpCLY7Pe NmlUEaG54d4507QFkXgAXgFpOHnRzQgsax2Au/kjDH09tnxVOWXhNVaYPyWvqXs/LkdY DwuTatx5ERstMVkzjGRHWcAxzH08L8Qxlb4TiIwzvU/v8XTatn7lNoj8BGZNtFXOrhGf zbpXoq6rMgeXRqdDAD53bbxk/6u3GG7FtyF1IasYRao1rhEqGoEJmR1yiLMOblaI4Vlf nD1VEqfx2aqIQlfzTJ6aD8dKIlqp60r+CkA9kB/OiwpBvh1pGZBYyictAiWLiLBMiUdx XsTw== X-Forwarded-Encrypted: i=1; AJvYcCXqR8xJH3Gi8wgPh787EDpzio7B3Q9Q4Dl/XY1WlzK0op7/Iohc8zemCNbdOLRopJlrrEVhBbUdHQclw6ZB@postgresql.org X-Gm-Message-State: AOJu0YzUtweNmYDQVnUvF/lO3KnKS8OIu/p/MnOj9uJZjuPU2qFr7L2F l5nqzJxiXBXtnKEN/Nzx+LJYl6qy9KVP6xhtkMgeLdXLDNDWyFi/WGrv7bXnGQ== X-Google-Smtp-Source: AGHT+IF7yWqtYjInxlbcqKBmUaByaL7/tAeOUu2k2CO3ChQqlRBhgm2S3PQmVtZiiI8FuTfgrm1Blg== X-Received: by 2002:a17:903:24e:b0:207:894:6e58 with SMTP id d9443c01a7336-20b37ba5f34mr63970865ad.56.1727454171328; Fri, 27 Sep 2024 09:22:51 -0700 (PDT) Received: from jeff-laptop.lan (c-76-102-242-158.hsd1.ca.comcast.net. [76.102.242.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-20b37e37168sm15273445ad.186.2024.09.27.09.22.50 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 27 Sep 2024 09:22:50 -0700 (PDT) Message-ID: Subject: Re: MAINTAIN privilege -- what do we need to un-revert it? From: Jeff Davis To: Nathan Bossart , Yugo NAGATA Cc: Noah Misch , Michael Paquier , pgsql-hackers@postgresql.org, Joe Conway , Robert Haas Date: Fri, 27 Sep 2024 09:22:48 -0700 In-Reply-To: References: <8e0438821bddd4de198989e6ac0f9a2aa27cabeb.camel@j-davis.com> <20240713214748.cb@rfd.leadboat.com.sranhm> <20240726122630.70e889f63a4d7e26f8549de8@sraoss.co.jp> <20240731182012.45d8231608896732395fc81a@sraoss.co.jp> <6bf8a76ebf3215d2226dbc2245d351aae577e4c1.camel@j-davis.com> <20240802161301.d975daca9ba7a706fa05ecd7@sraoss.co.jp> <20240805160502.d2a4975802a832b1e04afb80@sraoss.co.jp> <20240927124234.c5c18d6448c98b52fad62834@sraoss.co.jp> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.4-0ubuntu2 MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, 2024-09-27 at 10:34 -0500, Nathan Bossart wrote: > On Fri, Sep 27, 2024 at 12:42:34PM +0900, Yugo NAGATA wrote: > > I agree with you. I overlooked WITH NO DATA. > > I attached a updated patch. >=20 > Thanks.=C2=A0 Unless someone objects, I plan to commit this shortly. The command is run effectively in two parts: the CREATE part and the REFRESH part. The former just uses the session search path, while the latter uses the safe search path. I suggest that we add the wording to the query portion of the doc, near "security- restricted operation". Regards, Jeff Davis