• T
    Get rid of the separate RULE privilege for tables: now only a table's owner · 7bae5a28
    Tom Lane 提交于
    can create or modify rules for the table.  Do setRuleCheckAsUser() while
    loading rules into the relcache, rather than when defining a rule.  This
    ensures that permission checks for tables referenced in a rule are done with
    respect to the current owner of the rule's table, whereas formerly ALTER TABLE
    OWNER would fail to update the permission checking for associated rules.
    Removal of separate RULE privilege is needed to prevent various scenarios
    in which a grantee of RULE privilege could effectively have any privilege
    of the table owner.  For backwards compatibility, GRANT/REVOKE RULE is still
    accepted, but it doesn't do anything.  Per discussion here:
    http://archives.postgresql.org/pgsql-hackers/2006-04/msg01138.php
    7bae5a28
acl.h 10.1 KB