Horton

Re: First draft of the PG 15 release notes

Bruce Momjian <bruce@momjian.us>

View thread View on postgr.es
From: Bruce Momjian <bruce@momjian.us>
To: Noah Misch <noah@leadboat.com>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2022-06-28T20:35:45Z
Lists: pgsql-hackers

Attachments

On Mon, Jun 27, 2022 at 11:37:19PM -0700, Noah Misch wrote:
> On Tue, May 10, 2022 at 11:44:15AM -0400, Bruce Momjian wrote:
> > I have completed the first draft of the PG 15 release notes
> 
> > <!--
> > Author: Noah Misch <noah@leadboat.com>
> > 2021-09-09 [b073c3ccd] Revoke PUBLIC CREATE from public schema, now owned by pg
> > -->
> > 
> >     <listitem>
> >      <para>
> >       Remove <literal>PUBLIC</literal> creation permission on the <link
> >       linkend="ddl-schemas-public"><literal>public</literal> schema</link>
> >       (Noah Misch)
> >      </para>
> > 
> >      <para>
> >       This is a change in the default for newly-created databases in
> >       existing clusters and for new clusters;  <literal>USAGE</literal>
> 
> If you dump/reload an unmodified v14 template1 (as pg_dumpall and pg_upgrade
> do), your v15 template1 will have a v14 ACL on its public schema.  At that
> point, the fate of "newly-created databases in existing clusters" depends on
> whether you clone template1 or template0.  Does any of that detail belong
> here, or does the existing text suffice?

I think it is very confusing to have template0 have one value and
template1 have a different one, but as I understand it template0 will
only be used for pg_dump comparison, and that will keep template1 with
the same permissions, so I guess it is okay.

> >       permissions on the <literal>public</literal> schema has not
> >       been changed.  Databases restored from previous Postgres releases
> >       will be restored with their current permissions.  Users wishing
> >       to have the old permissions on new objects will need to grant
> 
> The phrase "old permissions on new objects" doesn't sound right to me, but I'm
> not sure why.  I think you're aiming for the fact that this is just a default;
> one can still change the ACL to anything, including to the old default.  If
> these notes are going to mention the old default like they do so far, I think
> they should also urge readers to understand
> https://www.postgresql.org/docs/devel/ddl-schemas.html#DDL-SCHEMAS-PATTERNS
> before returning to the old default.  What do you think?

Agreed, the new text is:

	Users wishing to have the former permissions will need to grant
	<literal>CREATE</literal> permission for <literal>PUBLIC</literal> on
	the <literal>public</literal> schema; this change can be made on
	<literal>template1</literal> to cause all new databases to have these
	permissions.

> 
> >       <literal>CREATE</literal> permission for <literal>PUBLIC</literal>
> >       on the <literal>public</literal> schema; this change can be made
> >       on <literal>template1</literal> to cause all new databases
> >       to have these permissions.  <literal>template1</literal>
> >       permissions for <application>pg_dumpall</application> and
> >       <application>pg_upgrade</application>?
> 
> pg_dumpall will change template1.  I think pg_upgrade will too, and neither
> program will change template0.

Okay, I will remove that question mark sentence.

> >      </para>
> >     </listitem>
> > 
> > <!--
> > Author: Noah Misch <noah@leadboat.com>
> > 2021-09-09 [b073c3ccd] Revoke PUBLIC CREATE from public schema, now owned by pg
> > -->
> > 
> >     <listitem>
> >      <para>
> >       Change the owner of the <literal>public</literal> schema to
> >       <literal>pg_database_owner</literal> (Noah Misch)
> >      </para>
> > 
> >      <para>
> >       Previously it was the literal user name of the database owner.
> 
> It was the bootstrap superuser.

Okay, text updated, thanks.  Applied patch attached.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Indecision is a decision.  Inaction is an action.  Mark Batterson

Commits

  1. Doc: last minute adjustment to the release notes

  2. Doc: more tweaking of v15 release notes.

  3. Doc: further adjust notes about pg_upgrade_output.d.

  4. Doc: add list of major features to the v15 release notes.

  5. relnotes: update item about public schema permission change

  6. relnotes: update ordered partition scan item

  7. relnotes: add Heikki to UTF8 item

  8. relnotes: improve UTF8 text item in relation to ASCII

  9. relnotes: add null logical replication item

  10. relnotes: adjust several logical replication items and FK text

  11. relnotes: mention non-exclusive backup mode was deprecated

  12. relnotes: add author to in-memory sorts item

  13. relnotes: update for non-exclusive backup mode removal

  14. relnote: improve sorting entries

  15. relnotes: adjustments from Álvaro Herrera

  16. relnotes: update foreign key partition and add sort items

  17. relnotes: more adjustments

  18. relnotes: logical replication permissions checked by subscrib.

  19. relnotes: adjustments

  20. relnotes: remove sequence replication and update 'postgres -C'

  21. relnote: extensive updates

  22. relnotes: "training" -> "trailing"

  23. Standardize references to Zstandard as <productname>

  24. pgstat: Update docs to match the shared memory stats reality.

  25. Raise a WARNING for missing publications.

  26. Skip empty transactions for logical replication.

  27. Optionally disable subscriptions on error.

  28. Allow root-owned SSL private keys in libpq, not only the backend.

  29. Use COPY FREEZE in pgbench for faster benchmark table population.