Re: Non-superuser subscription owners
От
Jeff Davis
Тема
Re: Non-superuser subscription owners
Дата
Msg-id
3c86885b0facc66eede94113123c1c3be39837fe.camel@j-davis.com
Ответ на
Re: Non-superuser subscription owners (Amit Kapila)
Список
Дерево обсуждения
Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Ronan Dunklau <ronan.dunklau@aiven.io>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Stephen Frost <sfrost@snowman.net>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners vignesh C <vignesh21@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Alexander Lakhin <exclusion@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Alvaro Herrera <alvherre@alvh.no-ip.org>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Tom Lane <tgl@sss.pgh.pa.us>
Re: sandboxing untrusted code Andres Freund <andres@anarazel.de>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jacob Champion <jacob.champion@enterprisedb.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Joe Conway <mail@joeconway.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
On Sat, 2022-01-08 at 15:35 +0530, Amit Kapila wrote: > On Sat, Jan 8, 2022 at 1:01 PM Jeff Davis wrote: > > > > On Sat, 2022-01-08 at 12:27 +0530, Amit Kapila wrote: > > > For Update/Delete, we do read the table first via > > > FindReplTupleInLocalRel(), so is there a need to check ACL_SELECT > > > before that? > > > > If it's logically an update/delete, then I think ACL_UPDATE/DELETE > > is > > the right one to check. Do you have a different opinion? > > > > But shouldn't we do it the first time before accessing the table? I'm not sure I follow the reasoning. Are you saying that, to logically replay a simple DELETE, the subscription owner should have SELECT privileges on the destination table? Is there a way that a subscription owner could somehow exploit a DELETE privilege to see the contents of a table on which they have no SELECT privileges? Or is it purely an internal read, which is necessary for any ordinary local DELETE/UPDATE anyway? Regards, Jeff Davis
В списке pgsql-hackers по дате отправления