Horton

Re: First draft of the PG 15 release notes

Bruce Momjian <bruce@momjian.us>

View thread View on postgr.es
From: Bruce Momjian <bruce@momjian.us>
To: Noah Misch <noah@leadboat.com>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2022-07-21T17:44:13Z
Lists: pgsql-hackers 
On Tue, Jul 12, 2022 at 02:47:07PM -0400, Bruce Momjian wrote:
> On Mon, Jul 11, 2022 at 11:31:32PM -0700, Noah Misch wrote:
> > On Mon, Jul 11, 2022 at 12:39:57PM -0400, Bruce Momjian wrote:
> > > I had trouble reading the sentences in the order you used so I
> > > restructured it:
> > > 
> > > 	The new default is one of the secure schema usage patterns that <xref
> > > 	linkend="ddl-schemas-patterns"/> has recommended since the security
> > > 	release for CVE-2018-1058.  The change applies to newly-created
> > > 	databases in existing clusters and for new clusters.  Upgrading a
> > > 	cluster or restoring a database dump will preserve existing permissions.
> > 
> > I agree with the sentence order change.
> 
> Great.
> 
> > > 	For existing databases, especially those having multiple users, consider
> > > 	issuing <literal>REVOKE</literal> to adopt this new default.  For new
> > > 	databases having zero need to defend against insider threats, granting
> > > 	<literal>USAGE</literal> permission on their <literal>public</literal>
> > > 	schemas will yield the behavior of prior releases.
> > 
> > s/USAGE/CREATE/ in the last sentence.  Looks good with that change.
> 
> Ah, yes, of course.

Patch applied,  I also adjusted the second paragraph to be more
symmetric.  You can see the results here:

	https://momjian.us/pgsql_docs/release-15.html

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Indecision is a decision.  Inaction is an action.  Mark Batterson

Commits

  1. Doc: last minute adjustment to the release notes

  2. Doc: more tweaking of v15 release notes.

  3. Doc: further adjust notes about pg_upgrade_output.d.

  4. Doc: add list of major features to the v15 release notes.

  5. relnotes: update item about public schema permission change

  6. relnotes: update ordered partition scan item

  7. relnotes: add Heikki to UTF8 item

  8. relnotes: improve UTF8 text item in relation to ASCII

  9. relnotes: add null logical replication item

  10. relnotes: adjust several logical replication items and FK text

  11. relnotes: mention non-exclusive backup mode was deprecated

  12. relnotes: add author to in-memory sorts item

  13. relnotes: update for non-exclusive backup mode removal

  14. relnote: improve sorting entries

  15. relnotes: adjustments from Álvaro Herrera

  16. relnotes: update foreign key partition and add sort items

  17. relnotes: more adjustments

  18. relnotes: logical replication permissions checked by subscrib.

  19. relnotes: adjustments

  20. relnotes: remove sequence replication and update 'postgres -C'

  21. relnote: extensive updates

  22. relnotes: "training" -> "trailing"

  23. Standardize references to Zstandard as <productname>

  24. pgstat: Update docs to match the shared memory stats reality.

  25. Raise a WARNING for missing publications.

  26. Skip empty transactions for logical replication.

  27. Optionally disable subscriptions on error.

  28. Allow root-owned SSL private keys in libpq, not only the backend.

  29. Use COPY FREEZE in pgbench for faster benchmark table population.