postgresql/src/backend
Robert Haas 482675987b Add a run_as_owner option to subscriptions.
This option is normally false, but can be set to true to obtain
the legacy behavior where the subscription runs with the permissions
of the subscription owner rather than the permissions of the
table owner. The advantages of this mode are (1) it doesn't require
that the subscription owner have permission to SET ROLE to each
table owner and (2) since no role switching occurs, the
SECURITY_RESTRICTED_OPERATION restrictions do not apply.

On the downside, it allows any table owner to easily usurp
the privileges of the subscription owner - basically, to take
over their account. Because that's generally quite undesirable,
we don't make this mode the default, but we do make it available,
just in case the new behavior causes too many problems for someone.

Discussion: http://postgr.es/m/CA+TgmoZ-WEeG6Z14AfH7KhmpX2eFh+tZ0z+vf0=eMDdbda269g@mail.gmail.com
2023-04-04 12:03:03 -04:00
..
access Make SP-GiST redirect cleanup more aggressive. 2023-04-03 11:47:48 -07:00
archive Redesign archive modules 2023-02-17 14:26:42 +09:00
backup Simplify useless 0L constants 2023-03-29 08:25:12 +02:00
bootstrap Fix CREATE INDEX progress reporting for multi-level partitioning. 2023-03-25 15:34:03 -04:00
catalog Add a run_as_owner option to subscriptions. 2023-04-04 12:03:03 -04:00
commands Add a run_as_owner option to subscriptions. 2023-04-04 12:03:03 -04:00
executor Revert 764da7710b 2023-04-03 16:55:09 +03:00
foreign Update copyright for 2023 2023-01-02 15:00:37 -05:00
jit SQL/JSON: support the IS JSON predicate 2023-03-31 22:34:04 +02:00
lib Fix ILIST_DEBUG build 2023-01-18 10:26:15 -08:00
libpq Make SCRAM iteration count configurable 2023-03-27 09:46:29 +02:00
main Mark options as deprecated in usage output 2023-03-02 14:36:37 +01:00
nodes Code review for recent SQL/JSON commits 2023-04-04 14:04:30 +02:00
optimizer Pass down table relation into more index relation functions 2023-04-01 20:18:29 -07:00
parser Code review for recent SQL/JSON commits 2023-04-04 14:04:30 +02:00
partitioning Add SysCacheGetAttrNotNull for guaranteed not-null attrs 2023-03-25 22:49:33 +01:00
po meson: add install-{quiet, world} targets 2023-03-23 21:20:18 -07:00
port Update copyright for 2023 2023-01-02 15:00:37 -05:00
postmaster Comment on expectations for AutoVacuumWorkItem handlers. 2023-03-25 13:00:27 -07:00
regex Refactor to introduce pg_locale_deterministic(). 2023-02-23 11:17:41 -08:00
replication Add a run_as_owner option to subscriptions. 2023-04-04 12:03:03 -04:00
rewrite Fix more bugs caused by adding columns to the end of a view. 2023-03-07 18:21:53 -05:00
snowball Update copyright for 2023 2023-01-02 15:00:37 -05:00
statistics Add SysCacheGetAttrNotNull for guaranteed not-null attrs 2023-03-25 22:49:33 +01:00
storage bufmgr: Remove buffer-write-dirty tracepoints 2023-04-03 18:02:41 -07:00
tcop When using valgrind, log the current query after an error is detected. 2023-04-03 10:18:38 -04:00
tsearch Fix t_isspace(), etc., when datlocprovider=i and datctype=C. 2023-03-17 12:08:46 -07:00
utils Perform logical replication actions as the table owner. 2023-04-04 11:25:23 -04:00
.gitignore
Makefile Redesign archive modules 2023-02-17 14:26:42 +09:00
common.mk Blind attempt to fix LLVM dependency in the backend 2022-09-15 10:53:48 +07:00
meson.build meson: Prevent installation of test files during main install 2023-03-03 07:45:52 +01:00
nls.mk NLS: Put list of available languages into LINGUAS files 2022-07-13 08:19:17 +02:00