Horton

Make inherited TRUNCATE perform access permission checks on parent table only.

Fujii Masao <fujii@postgresql.org>

View on postgr.es
Commit: 928e755d22de56e998b0b76596ebda1941e0e323
Author: Fujii Masao <fujii@postgresql.org>
Date: 2020-01-30T15:45:39Z
Releases: 9.6.17 
Make inherited TRUNCATE perform access permission checks on parent table only.

Previously, TRUNCATE command through a parent table checked the
permissions on not only the parent table but also the children tables
inherited from it. This was a bug and inherited queries should perform
access permission checks on the parent table only. This commit fixes
that bug.

Back-patch to all supported branches.

Author: Amit Langote
Reviewed-by: Fujii Masao
Discussion: https://postgr.es/m/CAHGQGwFHdSvifhJE+-GSNqUHSfbiKxaeQQ7HGcYz6SC2n_oDcg@mail.gmail.com

Files

PathChange+/−
src/backend/commands/tablecmds.c modified +49 −18
src/test/regress/expected/privileges.out modified +21 −0
src/test/regress/sql/privileges.sql modified +14 −0

Discussion