Cascade view drop permission checks

2022-04-05 Thread m7o...@gmail.com
Hello guys! I've faced an interesting case with cascade drops. If we drop some view that is dependency for another view then drop cascade will not check permissions for cascade-droppping views. Short example is: create user alice with password 'apassword'; create user bob with password 'bpassword'

Re: Cascade view drop permission checks

2022-04-06 Thread m7o...@gmail.com
(flags & PERFORM_DELETION_QUIETLY) ? DEBUG2 : WARNING; bool ok = true; StringInfoData clientdetail; StringInfoData logdetail; On Wed, Apr 6, 2022, 10:13 David G. Johnston wrote: > On Tuesday, April 5, 2022, m7o...@gmail.com wrote: > >> >> -- alice >> create o

View invoker privileges

2021-04-14 Thread m7o...@gmail.com
Hello guys! In Postgres we can create view with view owner privileges only. What’s the reason that there is no option to create view with invoker privileges? Is there any technical or security subtleties related to absence of this feature?