pgsql: Make inherited TRUNCATE perform access permission checks on pare

From: Fujii Masao <fujii(at)postgresql(dot)org>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Make inherited TRUNCATE perform access permission checks on pare
Date: 2020-01-30 15:48:37
Message-ID: E1ixC3Z-0007mZ-7e@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Make inherited TRUNCATE perform access permission checks on parent table only.

Previously, TRUNCATE command through a parent table checked the
permissions on not only the parent table but also the children tables
inherited from it. This was a bug and inherited queries should perform
access permission checks on the parent table only. This commit fixes
that bug.

Back-patch to all supported branches.

Author: Amit Langote
Reviewed-by: Fujii Masao
Discussion: https://postgr.es/m/CAHGQGwFHdSvifhJE+-GSNqUHSfbiKxaeQQ7HGcYz6SC2n_oDcg@mail.gmail.com

Branch
------
REL_11_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/a5b652f3a0110f81d2433855ab6bec136f92db83

Modified Files
--------------
src/backend/commands/tablecmds.c | 70 +++++++++++++++++++++++---------
src/test/regress/expected/privileges.out | 21 ++++++++++
src/test/regress/sql/privileges.sql | 14 +++++++
3 files changed, 86 insertions(+), 19 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Fujii Masao 2020-01-30 15:48:51 pgsql: Make inherited TRUNCATE perform access permission checks on pare
Previous Message Fujii Masao 2020-01-30 15:48:27 pgsql: Make inherited TRUNCATE perform access permission checks on pare