pgsql: Allow access to child table statistics if user can read parent t

2019-11-26 Thread Tom Lane
Allow access to child table statistics if user can read parent table. The fix for CVE-2017-7484 disallowed use of pg_statistic data for planning purposes if the user would not be able to select the associated column and a non-leakproof function is to be applied to the statistics values. That turn

pgsql: Allow access to child table statistics if user can read parent t

2019-11-26 Thread Tom Lane
Allow access to child table statistics if user can read parent table. The fix for CVE-2017-7484 disallowed use of pg_statistic data for planning purposes if the user would not be able to select the associated column and a non-leakproof function is to be applied to the statistics values. That turn

pgsql: Allow access to child table statistics if user can read parent t

2019-11-26 Thread Tom Lane
Allow access to child table statistics if user can read parent table. The fix for CVE-2017-7484 disallowed use of pg_statistic data for planning purposes if the user would not be able to select the associated column and a non-leakproof function is to be applied to the statistics values. That turn