Dear Fujii-san, > While tryng the new v19 feature CREATE/ALTER SUBSCRIPTION ... SERVER, > I found that ALTER SUBSCRIPTION ... OWNER TO can change the effective > conninfo for a SERVER subscription, but does not validate the new owner's > generated conninfo with walrcv_check_conninfo(). > As a result, the owner of a SERVER subscription with password_required=true > can be changed to a non-superuser whose generated connection string does not > contain a password.
Not sure, but can we also meet the similar situation via ALTER USER MAPPING ... (DROP password) command? I.e., the command would succeed but the worker will fail. If so, should we also fix the case? Or it's something like "Don't do that" situation? Best regards, Hayato Kuroda FUJITSU LIMITED
