Re: Non-superuser subscription owners
От
Ronan Dunklau
Тема
Re: Non-superuser subscription owners
Дата
Msg-id
4682671.GXAFRqVoOG@aivenronan
Ответ на
Non-superuser subscription owners (Mark Dilger)
Список
Дерево обсуждения
Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Ronan Dunklau <ronan.dunklau@aiven.io>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Jacob Champion <jchampion@timescale.com>
postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Stephen Frost <sfrost@snowman.net>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Jacob Champion <jchampion@timescale.com>
Re: postgres_fdw, dblink, and CREATE SUBSCRIPTION security Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners vignesh C <vignesh21@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Alexander Lakhin <exclusion@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Alvaro Herrera <alvherre@alvh.no-ip.org>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
RE: Non-superuser subscription owners "Zhijie Hou (Fujitsu)" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
RE: Non-superuser subscription owners "houzj.fnst@fujitsu.com" <houzj.fnst@fujitsu.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Tom Lane <tgl@sss.pgh.pa.us>
Re: sandboxing untrusted code Andres Freund <andres@anarazel.de>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jacob Champion <jacob.champion@enterprisedb.com>
Re: sandboxing untrusted code Robert Haas <robertmhaas@gmail.com>
Re: sandboxing untrusted code Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Stephen Frost <sfrost@snowman.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Joe Conway <mail@joeconway.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Andres Freund <andres@anarazel.de>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Tom Lane <tgl@sss.pgh.pa.us>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Robert Haas <robertmhaas@gmail.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Jeff Davis <pgsql@j-davis.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Amit Kapila <amit.kapila16@gmail.com>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Mark Dilger <mark.dilger@enterprisedb.com>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Re: Non-superuser subscription owners Andrew Dunstan <andrew@dunslane.net>
Le mercredi 20 octobre 2021, 20:40:39 CEST Mark Dilger a écrit : > These patches have been split off the now deprecated monolithic "Delegating > superuser tasks to new security roles" thread at [1]. > > The purpose of these patches is to allow non-superuser subscription owners > without risk of them overwriting tables they lack privilege to write > directly. This both allows subscriptions to be managed by non-superusers, > and protects servers with subscriptions from malicious activity on the > publisher side. Thank you Mark for splitting this. This patch looks good to me, and provides both better security (by closing the "dropping superuser role" loophole) and usefule features. -- Ronan Dunklau
В списке pgsql-hackers по дате отправления