Bharath Rupireddy <bharath.rupireddyforpostg...@gmail.com> writes: > In case of CTAS with no data, we actually do not insert the tuples > into the created table, so we can skip checking for the insert > permissions. Anyways, the insert permissions will be checked when the > tuples are inserted into the table.
I'd argue this is wrong. You don't get to skip permissions checks in ordinary queries just because, say, there's a LIMIT 0 on the query. regards, tom lane