Re: [BUGS] BUG #13694: Row Level Security by-passed with CREATEUSER permission

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Joe Conway <mail(at)joeconway(dot)com>
Cc: Andres Freund <andres(at)anarazel(dot)de>, justin(dot)catterson(at)sofiebio(dot)com, pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: [BUGS] BUG #13694: Row Level Security by-passed with CREATEUSER permission
Date: 2015-10-21 19:46:41
Message-ID: 46861.1445456801@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-hackers

Joe Conway <mail(at)joeconway(dot)com> writes:
> On 10/21/2015 11:26 AM, Andres Freund wrote:
>> On 2015-10-21 11:17:44 -0700, Tom Lane wrote:
>>> I wonder if it's time yet to remove those keywords. We've had the
>>> SUPERUSER spelling since 8.1, and this report should remind us that
>>> people get confused by the old spellings.

>> +1 for doing that in 9.6.

> 1++

Attached patch rips out CREATEUSER and NOCREATEUSER options lock, stock,
and barrel.

Another possibility is to change them to actually mean CREATEROLE and
NOCREATEROLE. I think probably a clean break is better though.

regards, tom lane

Attachment Content-Type Size
remove-obsolete-createrole-options.patch text/x-patch 11.5 KB

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Joe Conway 2015-10-21 20:06:11 Re: [BUGS] BUG #13694: Row Level Security by-passed with CREATEUSER permission
Previous Message Peter Eisentraut 2015-10-21 19:08:20 Re: pg_rewind exiting with error code 1 when source and target are on the same timeline

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2015-10-21 19:47:45 Re: Freezing without cleanup lock
Previous Message Jim Nasby 2015-10-21 19:28:45 Freezing without cleanup lock