Re: Non-superuser subscription owners

Поиск
Список
Период
Сортировка
Искать
От
Ronan Dunklau
Тема
Re: Non-superuser subscription owners
Дата
Msg-id
4682671.GXAFRqVoOG@aivenronan
Ответ на
Список
Дерево обсуждения
Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Ronan Dunklau <ronan.dunklau@aiven.io>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Stephen Frost <sfrost@snowman.net>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners vignesh C <vignesh21@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Alexander Lakhin <exclusion@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Alvaro Herrera <alvherre@alvh.no-ip.org>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Tom Lane <tgl@sss.pgh.pa.us>
Re: sandboxing untrusted code Andres Freund <andres@anarazel.de>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jacob Champion <jacob.champion@enterprisedb.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Joe Conway <mail@joeconway.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Le mercredi 20 octobre 2021, 20:40:39 CEST Mark Dilger a écrit :
> These patches have been split off the now deprecated monolithic "Delegating
> superuser tasks to new security roles" thread at [1].
> 
> The purpose of these patches is to allow non-superuser subscription owners
> without risk of them overwriting tables they lack privilege to write
> directly. This both allows subscriptions to be managed by non-superusers,
> and protects servers with subscriptions from malicious activity on the
> publisher side.

Thank you Mark for splitting this.

This patch looks good to me, and provides both better security (by closing the 
"dropping superuser role" loophole) and usefule features. 


-- 
Ronan Dunklau




В списке pgsql-hackers по дате отправления
От: Ronan Dunklau
Дата:
От: Michael Paquier
Дата:
FAQ