Hi!

> 13 марта 2019 г., в 22:55, Evgeniy Efimkin <efim...@yandex-team.ru> 
> написал(а):
> 
> I've prepare patch with new system role, i'm not sure about name, called it 
> "pg_subscription_users".
> In that patch we don't check permissions on target tables, i don't know, 
> should we check it?

Currently, user with pg_subscription_users can create subscription into any 
system table, can't they?
We certainly need to change it to more secure way.

Best regards, Andrey Borodin.

Reply via email to