Re: Extension ownership and misuse of SET ROLE/SET SESSION AUTHORIZATION

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: Re: Extension ownership and misuse of SET ROLE/SET SESSION AUTHORIZATION
Date: 2021-10-29 16:04:43
Message-ID: 650182.1635523483@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Daniel Gustafsson <daniel(at)yesql(dot)se> writes:
> On 13 Feb 2020, at 23:55, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
>>> Given the current behavior of SET ROLE and SET SESSION AUTHORIZATION,
>>> I don't actually see any way that we could get these features to
>>> play together.

> The recent work on pg_dump reminded me about this thread, AFAICT this was never
> addressed? Are you including it in the current line of work (if so, sorry for
> missing it in the threads) or should I take a stab at it?

No, I'm not working on this --- I'd kind of forgotten about it.
People didn't seem to like the idea of loosening the requirements
for SET ROLE, but I'm not sure how to solve the extension-ownership
problem without it.

> This patch still seems relevant for back-branches, but starting at 14 this time.

I think the appropriate thing to do is stick your patch into all branches
for the moment. We can remove it again whenever we invent a fix for the
problem.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Bharath Rupireddy 2021-10-29 16:55:04 Re: enhance pg_log_backend_memory_contexts() to log memory contexts of auxiliary processes
Previous Message David G. Johnston 2021-10-29 15:52:00 Re: Vulnerability identified with Postgres 13.4 for Windows