Hi!
> Currently, user with pg_subscription_users can create subscription into any system table, can't they?
> We certainly need to change it to more secure way.
No, you can't add system tables to publication. In new patch i add privileges checks on target table, non superuser
can'tcreate/refresh subscription if he don't have INSERT, UPDATE, DELETE and TRUNCATE privileges.
--------
Efimkin Evgeny