Re: Allow database owners to CREATE EVENT TRIGGER
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Steve Chavez <steve@supabase.io>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2025-03-05T15:28:40Z
Lists: pgsql-hackers
I wrote: > Or in other words: not-superuser to superuser is far from the only > type of privilege escalation that we need to prevent. After reflecting on that for a moment: maybe say that an event trigger fires for queries that are run by a role that the trigger's owning role is a member of? That changes nothing for superuser-owned triggers. regards, tom lane