Horton

Provide per-table permissions for vacuum and analyze.

Andrew Dunstan <andrew@dunslane.net>

View on postgr.es
Commit: b5d6382496f2b8fc31abd92c2654a9a67aca76c6
Author: Andrew Dunstan <andrew@dunslane.net>
Date: 2022-11-28T17:08:14Z
Releases: 16.0 
Provide per-table permissions for vacuum and analyze.

Currently a table can only be vacuumed or analyzed by its owner or
a superuser. This can now be extended to any user by means of an
appropriate GRANT.

Nathan Bossart

Reviewed by: Bharath Rupireddy, Kyotaro Horiguchi, Stephen Frost, Robert
Haas, Mark Dilger, Tom Lane, Corey Huinker, David G. Johnston, Michael
Paquier.

Discussion: https://postgr.es/m/20220722203735.GB3996698@nathanxps13

Files

PathChange+/−
doc/src/sgml/ddl.sgml modified +39 −10
doc/src/sgml/func.sgml modified +2 −1
doc/src/sgml/ref/alter_default_privileges.sgml modified +2 −2
doc/src/sgml/ref/analyze.sgml modified +2 −1
doc/src/sgml/ref/grant.sgml modified +3 −1
doc/src/sgml/ref/revoke.sgml modified +1 −1
doc/src/sgml/ref/vacuum.sgml modified +2 −1
src/backend/catalog/aclchk.c modified +8 −0
src/backend/commands/analyze.c modified +6 −7
src/backend/commands/vacuum.c modified +33 −29
src/backend/parser/gram.y modified +7 −0
src/backend/utils/adt/acl.c modified +16 −0
src/bin/pg_dump/dumputils.c modified +2 −0
src/bin/pg_dump/t/002_pg_dump.pl modified +1 −1
src/bin/psql/tab-complete.c modified +3 −2
src/include/commands/vacuum.h modified +2 −2
src/include/nodes/parsenodes.h modified +3 −1
src/include/utils/acl.h modified +4 −2
src/test/regress/expected/dependency.out modified +11 −11
src/test/regress/expected/privileges.out modified +63 −23
src/test/regress/expected/rowsecurity.out modified +17 −17
src/test/regress/expected/vacuum.out modified +6 −0
src/test/regress/sql/dependency.sql modified +1 −1
src/test/regress/sql/privileges.sql modified +40 −0

Documentation touched

Discussion