Horton

Make inherited TRUNCATE perform access permission checks on parent table only.

Fujii Masao <fujii@postgresql.org>

View on postgr.es
Commit: e6f1e560e4c6e764080af8c8d5e76cdea4d8d00a
Author: Fujii Masao <fujii@postgresql.org>
Date: 2020-01-30T15:42:06Z
Releases: 13.0 
Make inherited TRUNCATE perform access permission checks on parent table only.

Previously, TRUNCATE command through a parent table checked the
permissions on not only the parent table but also the children tables
inherited from it. This was a bug and inherited queries should perform
access permission checks on the parent table only. This commit fixes
that bug.

Back-patch to all supported branches.

Author: Amit Langote
Reviewed-by: Fujii Masao
Discussion: https://postgr.es/m/CAHGQGwFHdSvifhJE+-GSNqUHSfbiKxaeQQ7HGcYz6SC2n_oDcg@mail.gmail.com

Files

PathChange+/−
src/backend/commands/tablecmds.c modified +25 −7
src/test/regress/expected/privileges.out modified +21 −0
src/test/regress/sql/privileges.sql modified +14 −0

Discussion