On Wed, 2022-12-14 at 16:27 -0800, Nathan Bossart wrote: > I don't know if this is good enough. It seems like ideally you > should be > able to VACUUM a TOAST table directly if you have MAINTAIN on its > main > relation.
Right now, targetting the toast table directly requires the USAGE privilege on the toast schema, and you have to look up the name first, right? As it is, that's not a great UI. How about if we add a VACUUM option like TOAST_ONLY (or combine it with the PROCESS_TOAST option)? Then, you're always looking at the parent table first so there's no deadlock, do the permission checks on the parent, and then expand to the toast table with no check. This can be a follow-up patch; for now, the idea of skipping the privilege checks when expanding looks like an improvement. -- Jeff Davis PostgreSQL Contributor Team - AWS
