Correct permissions-checking bugs associated with ancient decision to
Tom Lane <tgl@sss.pgh.pa.us>
Correct permissions-checking bugs associated with ancient decision to copy PUBLIC access rights into each newly created ACL entry. Instead treat each ACL entry as independent flags. Also clean up some ugliness in acl.h API.
Files
| Path | Change | +/− |
|---|---|---|
| src/backend/catalog/aclchk.c | modified | +134 −52 |
| src/backend/commands/comment.c | modified | +2 −22 |
| src/backend/commands/remove.c | modified | +2 −4 |
| src/backend/utils/adt/acl.c | modified | +15 −20 |
| src/include/utils/acl.h | modified | +9 −7 |