On 2015-05-04 19:13:27 -0700, Peter Geoghegan wrote:
> A question has come up about RTEs, column-level privileges and BEFORE
> triggers. This commit message gives a summary:
>
> https://github.com/petergeoghegan/postgres/commit/87b9f27055e81d1396db3d10a5e9d01c52603783
>
> I'm pretty sure that I'll have to require SELECT privileges of the
> EXCLUDED.* RTE too (i.e. revert that commit, and probably document the
> new behavior of requiring that). I think it's worth getting feedback
> on this point, though, since it is a somewhat subtle issue.
I think it's pretty clear that we'll have to require that.
Greetings,
Andres Freund