When a superuser does GRANT or REVOKE on an object he doesn't own,

Tom Lane <tgl@sss.pgh.pa.us>

Commit: 85454829475451a095c695e8cd552791e488f89c
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2003-10-31T20:00:49Z
Releases: 7.4.1
When a superuser does GRANT or REVOKE on an object he doesn't own,
process the command as though it were issued by the object owner.
This prevents creating weird scenarios in which the same privileges
may appear to flow from different sources, and ensures that a superuser
can in fact revoke all privileges if he wants to.  In particular this
means that the regression tests work when run by a superuser other than
the original bootstrap userid.  Per report from Larry Rosenman.

Files

PathChange+/−
doc/src/sgml/ref/grant.sgml modified +20 −11
doc/src/sgml/ref/revoke.sgml modified +17 −7
src/backend/catalog/aclchk.c modified +98 −49