Revert MAINTAIN privilege and pg_maintain predefined role.
Nathan Bossart <nathan@postgresql.org>
Revert MAINTAIN privilege and pg_maintain predefined role. This reverts the following commits: 4dbdb82513, c2122aae63, 5b1a879943, 9e1e9d6560, ff9618e82a, 60684dd834, 4441fc704d, and b5d6382496. A role with the MAINTAIN privilege may be able to use search_path tricks to escalate privileges to the table owner. Unfortunately, it is too late in the v16 development cycle to apply the proposed fix, i.e., restricting search_path when running maintenance commands. Bumps catversion. Reviewed-by: Jeff Davis Discussion: https://postgr.es/m/E1q7j7Y-000z1H-Hr%40gemulon.postgresql.org Backpatch-through: 16
Files
Documentation touched
- doc/src/sgml/ddl.sgml
- doc/src/sgml/func.sgml
- doc/src/sgml/ref/alter_default_privileges.sgml
- doc/src/sgml/ref/analyze.sgml
- doc/src/sgml/ref/cluster.sgml
- doc/src/sgml/ref/grant.sgml
- doc/src/sgml/ref/lock.sgml
- doc/src/sgml/ref/refresh_materialized_view.sgml
- doc/src/sgml/ref/reindex.sgml
- doc/src/sgml/ref/revoke.sgml
- doc/src/sgml/ref/vacuum.sgml
- doc/src/sgml/user-manag.sgml
Discussion
- pgsql: Fix search_path to a safe value during maintenance operations. 54 messages · 2023-06-09 → 2023-08-01