Re: Clarification on Role Access Rights to Table Indexes

Ayush Vatsa <ayushvatsa1810@gmail.com>

From: Ayush Vatsa <ayushvatsa1810@gmail.com>

To: Robert Haas <robertmhaas@gmail.com>

Cc: Tom Lane <tgl@sss.pgh.pa.us>, "David G. Johnston" <david.g.johnston@gmail.com>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>

Date: 2025-02-19T10:23:48Z

Lists: pgsql-hackers, pgsql-general

Attachments

v1-0001-Improve-ACL-checks-in-pg_prewarm-for-indexes.patch (application/octet-stream) patch v1-0001

Hello Everyone,
It seems there's a general consensus that we should maintain a
original design to support pg_prewarm, with a minor adjustment:
when querying indexes, we should verify the privileges of the parent table.

I’ve attached a patch for this, which includes some test cases as well.
Let me know if it needs any changes.

Regards,
Ayush Vatsa
SDE AWS

Commits

Fix privilege checks for pg_prewarm() on indexes.
- fae0ce5e318e 16.11 landed
- f146eb45cb1a 14.20 landed
- a0551bc5734b 17.7 landed
- 6c03ae8d6e81 15.15 landed
- 3ccf8e9ac96e 18.1 landed
- 208927e65692 19 (unreleased) landed
- 19a64f5676bb 13.23 landed
Fix lookup code for REINDEX INDEX.
- 079480dc2022 19 (unreleased) landed
Fix redefinition of typedef RangeVar.
- 15d7dded0e93 18.1 landed
Fix lookups in pg_{clear,restore}_{attribute,relation}_stats().
- c8af5019bee5 18.1 landed
- 688dc6299a5b 19 (unreleased) landed
dblink: Avoid locking relation before privilege check.
- c9b299f6df98 19 (unreleased) landed