KaiGai Kohei <kaigai@ak.jp.nec.com> writes:
> Hmm. If both REFERENCES and SELECT privilege are required to create
> a new FK constraint, why RI_Initial_Check() need to check SELECT
> permission prior to SPI_execute()?
> It eventually checks SELECT privilege during execution of the secondary
> query. It is unclear for me why we need to provide a slower fallback.
Because the queries inside the triggers are done with a different
current userid.
regards, tom lane