| From: | Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com> |
|---|---|
| To: | pgsql-hackers <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: logical replication access control patches |
| Date: | 2017-03-16 01:54:52 |
| Message-ID: | 0b477a34-01c5-ad97-b408-79f4e0e6414b@2ndquadrant.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
New patch set based on the discussions. I have dropped the PUBLICATION
privilege patch. The patches are also reordered a bit in approximate
decreasing priority order.
0001 Refine rules for altering publication owner
kind of a bug fix
0002 Change logical replication pg_hba.conf use
This was touched upon in the discussion at
<https://www.postgresql.org/message-id/flat/CAB7nPqRf8eOv15SPQJbC1npJoDWTNPMTNp6AvMN-XWwB53h2Cg%40mail.gmail.com>
and seems to have been viewed favorably there.
0003 Add USAGE privilege for publications
a way to control who can subscribe to a publication
0004 Add subscription apply worker privilege checks
This is a prerequisite for the next one (or one like it).
0005 Add CREATE SUBSCRIPTION privilege on databases
Need a way to determine which user can create subscriptions. The
presented approach made sense to me, but maybe there are other ideas.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
| Attachment | Content-Type | Size |
|---|---|---|
| v2-0001-Refine-rules-for-altering-publication-owner.patch | application/x-patch | 4.7 KB |
| v2-0002-Change-logical-replication-pg_hba.conf-use.patch | application/x-patch | 2.8 KB |
| v2-0003-Add-USAGE-privilege-for-publications.patch | application/x-patch | 42.7 KB |
| v2-0004-Add-subscription-apply-worker-privilege-checks.patch | application/x-patch | 5.2 KB |
| v2-0005-Add-CREATE-SUBSCRIPTION-privilege-on-databases.patch | application/x-patch | 14.1 KB |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2017-03-16 02:13:14 | Re: Upgrading postmaster's log messages about bind/listen errors |
| Previous Message | Michael Paquier | 2017-03-16 01:52:57 | Re: Backend crash on non-exclusive backup cancel |