Re: Non-superuser subscription owners

Поиск
Список
Период
Сортировка
Искать
От
Jeff Davis
Тема
Re: Non-superuser subscription owners
Дата
Msg-id
3c86885b0facc66eede94113123c1c3be39837fe.camel@j-davis.com
Ответ на
Список
Дерево обсуждения
Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Ronan Dunklau <ronan.dunklau@aiven.io>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Stephen Frost <sfrost@snowman.net>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners vignesh C <vignesh21@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Alexander Lakhin <exclusion@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Alvaro Herrera <alvherre@alvh.no-ip.org>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Tom Lane <tgl@sss.pgh.pa.us>
Re: sandboxing untrusted code Andres Freund <andres@anarazel.de>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jacob Champion <jacob.champion@enterprisedb.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Joe Conway <mail@joeconway.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
On Sat, 2022-01-08 at 15:35 +0530, Amit Kapila wrote:
> On Sat, Jan 8, 2022 at 1:01 PM Jeff Davis  wrote:
> > 
> > On Sat, 2022-01-08 at 12:27 +0530, Amit Kapila wrote:
> > > For Update/Delete, we do read the table first via
> > > FindReplTupleInLocalRel(), so is there a need to check ACL_SELECT
> > > before that?
> > 
> > If it's logically an update/delete, then I think ACL_UPDATE/DELETE
> > is
> > the right one to check. Do you have a different opinion?
> > 
> 
> But shouldn't we do it the first time before accessing the table?

I'm not sure I follow the reasoning. Are you saying that, to logically
replay a simple DELETE, the subscription owner should have SELECT
privileges on the destination table?

Is there a way that a subscription owner could somehow exploit a DELETE
privilege to see the contents of a table on which they have no SELECT
privileges? Or is it purely an internal read, which is necessary for
any ordinary local DELETE/UPDATE anyway?

Regards,
	Jeff Davis




В списке pgsql-hackers по дате отправления
От: Amit Kapila
Дата:
От: Tom Lane
Дата:
FAQ