Horton

Make inherited TRUNCATE perform access permission checks on parent table only.

Fujii Masao <fujii@postgresql.org>

View on postgr.es
Commit: 56bc82a5111737d76f211356eeb2b1a8e657e8b4
Author: Fujii Masao <fujii@postgresql.org>
Date: 2020-01-30T15:47:09Z
Releases: 9.4.26 
Make inherited TRUNCATE perform access permission checks on parent table only.

Previously, TRUNCATE command through a parent table checked the
permissions on not only the parent table but also the children tables
inherited from it. This was a bug and inherited queries should perform
access permission checks on the parent table only. This commit fixes
that bug.

Back-patch to all supported branches.

Author: Amit Langote
Reviewed-by: Fujii Masao
Discussion: https://postgr.es/m/CAHGQGwFHdSvifhJE+-GSNqUHSfbiKxaeQQ7HGcYz6SC2n_oDcg@mail.gmail.com

Files

PathChange+/−
src/backend/commands/tablecmds.c modified +49 −18
src/test/regress/expected/privileges.out modified +21 −0
src/test/regress/sql/privileges.sql modified +14 −0

Discussion