Horton

Make inherited TRUNCATE perform access permission checks on parent table only.

Fujii Masao <fujii@postgresql.org>

View on postgr.es
Commit: 4b96c03a0a2a6bdf685a0bef9fff1fb5f04516aa
Author: Fujii Masao <fujii@postgresql.org>
Date: 2020-01-30T15:44:50Z
Releases: 10.12 
Make inherited TRUNCATE perform access permission checks on parent table only.

Previously, TRUNCATE command through a parent table checked the
permissions on not only the parent table but also the children tables
inherited from it. This was a bug and inherited queries should perform
access permission checks on the parent table only. This commit fixes
that bug.

Back-patch to all supported branches.

Author: Amit Langote
Reviewed-by: Fujii Masao
Discussion: https://postgr.es/m/CAHGQGwFHdSvifhJE+-GSNqUHSfbiKxaeQQ7HGcYz6SC2n_oDcg@mail.gmail.com

Files

PathChange+/−
src/backend/commands/tablecmds.c modified +50 −19
src/test/regress/expected/privileges.out modified +21 −0
src/test/regress/sql/privileges.sql modified +14 −0

Discussion