Horton

Re: Revoke execution permission of pg_stat_statements_reset() from pg_read_all_stats role

Michael Paquier <michael@paquier.xyz>

View thread View on postgr.es
From: Michael Paquier <michael@paquier.xyz>
To: Haribabu Kommi <kommi.haribabu@gmail.com>
Cc: pgsql-hackers@lists.postgresql.org, Amit Kapila <amit.kapila16@gmail.com>, Dave Page <dpage@pgadmin.org>, Simon Riggs <simon@2ndquadrant.com>, Fujii Masao <masao.fujii@gmail.com>
Date: 2018-09-24T15:44:19Z
Lists: pgsql-hackers 
On Mon, Sep 24, 2018 at 11:08:14AM +1000, Haribabu Kommi wrote:
> In commit 25fff40798 the execute permission of pg_stat_statements_reset()
> is provided to pg_read_all_stats role in [1].
> 
> The execute permissions grant to pg_read_all_stats concern is raised in [2]
> during the discussion of supporting different methods of reset the stats,
> instead of resetting all.
> 
> Here I attached the patch that reverts the permission grant as per the
> discussion
> in [3].

This should be back-patched.  Any opinions about bumping up this
extension version in back-branches like what has been done in 53b79ab4?
--
Michael

Commits

  1. Revoke pg_stat_statements_reset() permissions

  2. Default monitoring roles