Non-superuser subscription owners

Mark Dilger <mark.dilger@enterprisedb.com>

View thread

From: Mark Dilger <mark.dilger@enterprisedb.com>

To: PostgreSQL-development <pgsql-hackers@postgresql.org>

Cc: Andrew Dunstan <andrew@dunslane.net>

Date: 2021-10-20T18:40:39Z

Lists: pgsql-hackers

Attachments

v1-0001-Handle-non-superuser-subscription-owners-sensibly.patch (application/octet-stream) patch v1-0001
v1-0002-Allow-subscription-ownership-by-non-superusers.patch (application/octet-stream) patch v1-0002
v1-0003-Respect-permissions-within-logical-replication.patch (application/octet-stream) patch v1-0003
(unnamed) (text/plain)

These patches have been split off the now deprecated monolithic "Delegating superuser tasks to new security roles" thread at [1].

The purpose of these patches is to allow non-superuser subscription owners without risk of them overwriting tables they lack privilege to write directly. This both allows subscriptions to be managed by non-superusers, and protects servers with subscriptions from malicious activity on the publisher side.

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Fix possible crash in tablesync worker.
- b5c517379a40 16.0 landed
Display 'password_required' option for \dRs+ command.
- 19e65dff38bd 16.0 landed
Restart the apply worker if the 'password_required' option is changed.
- c1cc4e688b60 16.0 landed
Fix possible logical replication crash.
- e7e7da2f8d57 16.0 landed
Add new predefined role pg_create_subscription.
- c3afe8cf5a1e 16.0 landed
Expand AclMode to 64 bits
- 7b378237aa80 16.0 cited
More cleanup of a2ab9c06ea.
- 96a6f11c0625 15.0 landed
Respect permissions within logical replication.
- a2ab9c06ea15 15.0 landed
Improve table locking behavior in the face of current DDL.
- 2ad36c4e44c8 9.2.0 cited