User with BYPASSRLS privilege can't change password

From: Wolfgang Walther <walther(at)technowledgy(dot)de>
To: pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: User with BYPASSRLS privilege can't change password
Date: 2020-11-03 15:51:07
Message-ID: a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Hi,

observed on PG12.4:

CREATE USER alice;
SET ROLE alice;
ALTER USER alice PASSOWRD 'x';
-- works

RESET ROLE;

CREATE USER bob BYPASSRLS;
SET ROLE bob;
ALTER USER bob PASSWORD 'x';
-- ERROR: must be superuser to change bypassrls attribute

I would expect bob to be able to change his password here.

Best

Wolfgang

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2020-11-03 16:19:04 Re: pg should ignore u+200b zero width space
Previous Message Heikki Linnakangas 2020-11-03 15:13:41 Re: pg should ignore u+200b zero width space