pgsql: In REFRESH MATERIALIZED VIEW, set user ID before running user co

Поиск
Список
Период
Сортировка
От Noah Misch
Тема pgsql: In REFRESH MATERIALIZED VIEW, set user ID before running user co
Дата
Msg-id E1no5SD-000lVP-4j@gemulon.postgresql.org
обсуждение исходный текст
Список pgsql-committers
Дерево обсуждения 
In REFRESH MATERIALIZED VIEW, set user ID before running user code.

It intended to, but did not, achieve this.  Adopt the new standard of
setting user ID just after locking the relation.  Back-patch to v10 (all
supported versions).

Reviewed by Simon Riggs.  Reported by Alvaro Herrera.

Security: CVE-2022-1552

Branch
------
REL_12_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/880511cb0bdfd75a29ada6b80bf6e4efe6bc27b4

Modified Files
--------------
src/backend/commands/matview.c           | 30 +++++++++++-------------------
src/test/regress/expected/privileges.out | 16 ++++++++++++++++
src/test/regress/sql/privileges.sql      | 17 +++++++++++++++++
3 files changed, 44 insertions(+), 19 deletions(-)

В списке pgsql-committers по дате отправления:

Предыдущее
От: Andrew Dunstan
Дата:
Сообщение: Re: pgsql: Remove command checks in tests of pg_basebackup and pg_receivewa
Следующее
От: Tom Lane
Дата:
Сообщение: pgsql: Revert "Disallow infinite endpoints in generate_series() for tim