Re: Privileges on PUBLICATION

Antonin Houska <ah@cybertec.at>

From: Antonin Houska <ah@cybertec.at>
To: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
Cc: Amit Kapila <amit.kapila16@gmail.com>, Euler Taveira <euler@eulerto.com>, PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Date: 2022-05-13T06:38:55Z
Lists: pgsql-hackers
Peter Eisentraut <peter.eisentraut@enterprisedb.com> wrote:

> On 10.05.22 10:37, Antonin Houska wrote:
> > My understanding is that the rows/columns filtering is a way for the
> > *publisher*  to control which data is available to particular replica. From
> > this point of view, the publication privileges would just make the control
> > complete.
> 
> I think privileges on publications would eventually be useful.  But are you
> arguing that we need them for PG15 to make the new features usable safely?

I didn't think that far, but user should be aware of the problem. My proposal
of documentation is in https://www.postgresql.org/message-id/5859.1652423797%40antos

-- 
Antonin Houska
Web: https://www.cybertec-postgresql.com



Commits

  1. Refactor ExecGrant_*() functions

  2. doc: Add note about lack of publication privileges