Re: [PATCH] Simplify permission checking logic in user.c

Поиск
Список
Период
Сортировка
От Andrey Borodin
Тема Re: [PATCH] Simplify permission checking logic in user.c
Дата
Msg-id 2EA2837D-F9D6-4F3C-AF10-BA8744106E61@yandex-team.ru
обсуждение исходный текст
Ответ на Re: [PATCH] Simplify permission checking logic in user.c  (Stephen Frost <sfrost@snowman.net>)
Ответы Re: [PATCH] Simplify permission checking logic in user.c  (Paul Martinez <paulmtz@google.com>)
Список pgsql-hackers

> 30 дек. 2020 г., в 20:26, Stephen Frost <sfrost@snowman.net> написал(а):
>
> I'd strongly suggest that, instead, you consider proposing changes which
> would address the actual use cases you have and work with the community
> to have those included in core, which would further have the added
> property that everyone would then benefit from those improvements.
+1. Last time we asked to change something in privileges[0], we got a feedback pointing to possible vulnerability.
We fixed it in our services and reported to, AFAIR, RDS and Aiven (with PoC exploits).

I think that sharing "various small changes to permission checks" is a really good idea.

> 30 дек. 2020 г., в 20:39, Stephen Frost <sfrost@snowman.net> написал(а):
> In other words, I suspect people would be happier if we
> provided a way for non-superusers a way to create replication roles and
> bypassrls roles.
+1 again. I hope we will return to the topic soon.

Best regards, Andrey Borodin.

[0] https://www.postgresql.org/message-id/flat/1269681541151271%40myt5-68ad52a76c91.qloud-c.yandex.net


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Greg Sabino Mullane
Дата:
Сообщение: Re: psql \df choose functions by their arguments
Следующее
От: Pavel Stehule
Дата:
Сообщение: Re: [HACKERS] [PATCH] Generic type subscripting