Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit0d233f4

Browse files
committed
Add note about access permission checks by inherited TRUNCATE and LOCK TABLE.
Inherited queries perform access permission checks on the parenttable only. But there are two exceptions to this rule in v12 or before;TRUNCATE and LOCK TABLE commands through a parent table checkthe permissions on not only the parent table but also the childrentables. Previously these exceptions were not documented.This commit adds the note about these exceptions, into the document.Back-patch to v9.4. But we don't apply this commit to the masterbecause commite6f1e56 already got rid of the exception aboutinherited TRUNCATE and upcoming commit will do for the exceptionabout inherited LOCK TABLE.Author: Amit LangoteReviewed-by: Fujii MasaoDiscussion:https://postgr.es/m/CA+HiwqHfTnMU6SUkyHxCmpHUKk7ERLHCR3vZVq19ZOQBjPBLmQ@mail.gmail.com
1 parentddab5fb commit0d233f4

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

‎doc/src/sgml/ddl.sgml

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2820,7 +2820,15 @@ VALUES ('Albany', NULL, NULL, 'NY');
28202820
accessed through <structname>cities</structname>. This preserves the appearance
28212821
that the data is (also) in the parent table. But
28222822
the <structname>capitals</structname> table could not be updated directly
2823-
without an additional grant. In a similar way, the parent table's row
2823+
without an additional grant. Two exceptions to this rule are
2824+
<command>TRUNCATE</command> and <command>LOCK TABLE</command>,
2825+
where permissions on the child tables are always checked,
2826+
whether they are processed directly or recursively via those commands
2827+
performed on the parent table.
2828+
</para>
2829+
2830+
<para>
2831+
In a similar way, the parent table's row
28242832
security policies (see <xref linkend="ddl-rowsecurity"/>) are applied to
28252833
rows coming from child tables during an inherited query. A child table's
28262834
policies, if any, are applied only when it is the table explicitly named

0 commit comments

Comments
 (0)

[8]ページ先頭

©2009-2025 Movatter.jp