From: | "tanghy(dot)fnst(at)fujitsu(dot)com" <tanghy(dot)fnst(at)fujitsu(dot)com> |
---|---|
To: | Amit Kapila <amit(dot)kapila16(at)gmail(dot)com>, vignesh C <vignesh21(at)gmail(dot)com> |
Cc: | Masahiko Sawada <sawada(dot)mshk(at)gmail(dot)com>, "houzj(dot)fnst(at)fujitsu(dot)com" <houzj(dot)fnst(at)fujitsu(dot)com>, Greg Nancarrow <gregn4422(at)gmail(dot)com>, Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Peter Smith <smithpb2250(at)gmail(dot)com>, Ajin Cherian <itsajin(at)gmail(dot)com>, Rahila Syed <rahilasyed90(at)gmail(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>, Bharath Rupireddy <bharath(dot)rupireddyforpostgres(at)gmail(dot)com> |
Subject: | RE: Added schema level support for publication. |
Date: | 2021-10-19 05:53:25 |
Message-ID: | OS0PR01MB6113852959047CE53818EC4CFBBD9@OS0PR01MB6113.jpnprd01.prod.outlook.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Tuesday, October 19, 2021 12:57 PM Amit Kapila <amit(dot)kapila16(at)gmail(dot)com> wrote:
>
> On Tue, Oct 19, 2021 at 9:15 AM tanghy(dot)fnst(at)fujitsu(dot)com
> <tanghy(dot)fnst(at)fujitsu(dot)com> wrote:
> >
> > On Monday, October 18, 2021 8:23 PM vignesh C <vignesh21(at)gmail(dot)com>
> wrote:
> > >
> > > Thanks for the comments, the attached v42 patch has the fixes for the same.
> >
> > Thanks for your new patch.
> >
> > I tried your patch and found that the permission check for superuser didn't work.
> >
> > For example:
> > postgres=# create role r1;
> > CREATE ROLE
> > postgres=# grant all privileges on database postgres to r1;
> > GRANT
> > postgres=# set role r1;
> > SET
> > postgres=> create schema s1;
> > CREATE SCHEMA
> > postgres=> create publication pub for all tables in schema s1;
> > CREATE PUBLICATION
> >
> > Role r1 is not superuser, but this role could create publication for all tables in
> schema
> > successfully, I think it is related the following change. List schemaidlist was
> > not assigned yet. I think we should check it later.
> >
>
> It seems this got broken in yesterday's patch version. Do you think it
> is a good idea to add a test for this case?
>
Agreed. Thanks for your suggestion.
I tried to add this test to publication.sql, a patch diff file for this test is attached.
Regards
Tang
Attachment | Content-Type | Size |
---|---|---|
Topup-permissions-test_diff | application/octet-stream | 1.2 KB |
From | Date | Subject | |
---|---|---|---|
Next Message | Bharath Rupireddy | 2021-10-19 06:18:24 | Re: can we add subscription TAP test option "vcregress subscriptioncheck" for MSVC builds? |
Previous Message | Masahiko Sawada | 2021-10-19 05:51:36 | Re: Inconsistent behavior of pg_dump/pg_restore on DEFAULT PRIVILEGES |