Re: Non-superuser subscription owners

Jeff Davis <pgsql@j-davis.com>

From: Jeff Davis <pgsql@j-davis.com>

To: Mark Dilger <mark.dilger@enterprisedb.com>

Cc: Robert Haas <robertmhaas@gmail.com>, Andres Freund <andres@anarazel.de>, Amit Kapila <amit.kapila16@gmail.com>, Andrew Dunstan <andrew@dunslane.net>, PostgreSQL-development <pgsql-hackers@postgresql.org>

Date: 2023-02-22T18:49:42Z

Lists: pgsql-hackers

On Wed, 2023-02-22 at 09:27 -0800, Mark Dilger wrote:
> Another option is to execute under the intersection of their
> privileges, where both the definer and the invoker need the
> privileges in order for the action to succeed.  That would be more
> permissive than the proposed SECURITY NONE, while still preventing
> either party from hijacking privileges of the other.

Interesting idea, I haven't heard of something like that being done
before. Is there some precedent for that or a use case where it's
helpful?

Regards,
	Jeff Davis

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Fix possible crash in tablesync worker.
- b5c517379a40 16.0 landed
Display 'password_required' option for \dRs+ command.
- 19e65dff38bd 16.0 landed
Restart the apply worker if the 'password_required' option is changed.
- c1cc4e688b60 16.0 landed
Fix possible logical replication crash.
- e7e7da2f8d57 16.0 landed
Add new predefined role pg_create_subscription.
- c3afe8cf5a1e 16.0 landed
Expand AclMode to 64 bits
- 7b378237aa80 16.0 cited
More cleanup of a2ab9c06ea.
- 96a6f11c0625 15.0 landed
Respect permissions within logical replication.
- a2ab9c06ea15 15.0 landed
Improve table locking behavior in the face of current DDL.
- 2ad36c4e44c8 9.2.0 cited