Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1r03Q4-002xhz-MZ for pgsql-hackers@arkaria.postgresql.org; Mon, 06 Nov 2023 17:29:48 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1r03Q2-000FYK-TI for pgsql-hackers@arkaria.postgresql.org; Mon, 06 Nov 2023 17:29:46 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1r03Q2-000FXc-J6 for pgsql-hackers@lists.postgresql.org; Mon, 06 Nov 2023 17:29:46 +0000 Received: from mail-ej1-x634.google.com ([2a00:1450:4864:20::634]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1r03Pz-0052GN-Fn for pgsql-hackers@lists.postgresql.org; Mon, 06 Nov 2023 17:29:45 +0000 Received: by mail-ej1-x634.google.com with SMTP id a640c23a62f3a-9ae2cc4d17eso735499666b.1 for ; Mon, 06 Nov 2023 09:29:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1699291781; x=1699896581; darn=lists.postgresql.org; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=nWOoVV2aLzZoXpOwjk7bWZr4i4XvRmQpXTDCY8qt04A=; b=kzFiXmph+Rn9Kw8Siv3jgjWwel0N+0L8p4jSO/XfZqgtBvYfFfgyLptYmjcvvk9nuV cUMZ35kAvPAKOhELB2spo96kEufZJKbMFFmfnwMtaAMvpzidRU92QglqHdxbXdMTqyA0 LFS7DwSUiAluEOJBrr7Vs7dF/eq4mE021SXMXQy0ewS/xTwkPglCB3DHt9pWitSeeqUm Eei47zavoVdhoH9anHbTriiI6ZQ4uupDEQfbDIxoTvh5qheYeIZNaZpO6hJ2QP/fl6Ei po2BP2lmT33oyWLA1B8MwRlxzIMzTEMLu2LfSOHwqETOoDT8D7LXjnjFrxI0I1g+oC6j /pTg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699291781; x=1699896581; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=nWOoVV2aLzZoXpOwjk7bWZr4i4XvRmQpXTDCY8qt04A=; b=cZGpCw4ioEVeOR6nUN7WORxUYYM0d5umAfwbzVgi0zA7xrDJ/NgGtkIs1c6DMO/7q6 vMpFr2OKHWCu5ID4S7xxpWXdpgFBCPeQnDeeiZmBtf1K8PLPezh3Yzg826Hy3og9DxbP fpQmC/rkdYkr2bn6GB9pE3yK+Mu6UulAuWlzvxRSujlZWZg6ZwRWAb8MxFH4TU5jn9/p 2THGRWTpbkCW/mqIxwVWNBoHMxs8vwy8a8SLk6OZNd4uxkYWYUfKih2icU8bL2r342QH d+np88pPcnlLUYZGX+Pd3t/AnqJ4ZKALWyYk4U4bTg4aRqDBI7HRLvrDa4bPlGpoiMZi /N/A== X-Gm-Message-State: AOJu0YwjBGGRFmZUljTJPpKZeO79W7tgVe8IFvCzSPBPLsMBacrTf9SU U5eWoTgaXwUJYTjvqAFumBbB4d+MOcle7c4qLl3+zw== X-Google-Smtp-Source: AGHT+IEQRfy5JjB2meV6wJN+e5LsDB5JNj2Wp/V/uLplqZzJ1kgPxvemtJcXTQiiL9eiTLifERes+w== X-Received: by 2002:a17:907:841:b0:9be:9d5f:6967 with SMTP id ww1-20020a170907084100b009be9d5f6967mr13862197ejb.69.1699291781044; Mon, 06 Nov 2023 09:29:41 -0800 (PST) Received: from [10.137.0.17] (srv1.mobissw.com. [89.235.0.226]) by smtp.gmail.com with ESMTPSA id hh8-20020a170906a94800b00992ea405a79sm59082ejb.166.2023.11.06.09.29.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 06 Nov 2023 09:29:40 -0800 (PST) Message-ID: Date: Mon, 6 Nov 2023 18:29:39 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1 Subject: Re: Wrong security context for deferred triggers? Content-Language: en-US To: Laurenz Albe , pgsql-hackers@lists.postgresql.org References: <77ee784cf248e842f74588418f55c2931e47bd78.camel@cybertec.at> From: Tomas Vondra In-Reply-To: <77ee784cf248e842f74588418f55c2931e47bd78.camel@cybertec.at> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 11/6/23 14:23, Laurenz Albe wrote: > ... > > This behavior looks buggy to me. What do you think? > I cannot imagine that it is a security problem, though. > How could code getting executed under the wrong role not be a security issue? Also, does this affect just the role, or are there some other settings that may unexpectedly change (e.g. search_path)? regards -- Tomas Vondra EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company