Re: [GENERAL] Strange security issue with Superuser access

2015-03-12 Thread Adrian Klaver
On 03/10/2015 08:20 AM, Andrzej Pilacik wrote: I see the issues that this person might be having. I am not doing a restore or working on an existing issue. I know, but the thread actually covers the same ground. If you want to learn exactly what happens with FKs and users in Postgres read Tom

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread Jerry Sievers
"David G. Johnston" writes: > On Tue, Mar 10, 2015 at 8:20 AM, Andrzej Pilacik wrote: > > I see the issues that this person might be having.  I am not doing a > restore or working on an existing issue. > > My setup is very vanilla, anyone can create these tables and test, will > g

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread David G. Johnston
On Tue, Mar 10, 2015 at 8:20 AM, Andrzej Pilacik wrote: > I see the issues that this person might be having. I am not doing a > restore or working on an existing issue. > > My setup is very vanilla, anyone can create these tables and test, will > get the same permission error... (I did it in a

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread Andrzej Pilacik
I see the issues that this person might be having. I am not doing a restore or working on an existing issue. My setup is very vanilla, anyone can create these tables and test, will get the same permission error... (I did it in a brand new environment) What I am asking here is why does a SUPERUS

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread Adrian Klaver
On 03/10/2015 05:41 AM, Stephen Frost wrote: * Andrzej Pilacik (cypise...@gmail.com) wrote: Can anyone explain how the FK constraint function works? Is it executed as the owner of the object. That is the only thing that would make sense for me. Yes. This brought back a memory. For the how

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread Stephen Frost
* Andrzej Pilacik (cypise...@gmail.com) wrote: > Can anyone explain how the FK constraint function works? Is it executed as > the owner of the object. That is the only thing that would make sense for > me. Yes. Thanks, Stephen signature.asc Description: Digital signat

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread Andrzej Pilacik
Yes, it was a typo by me, the second insert should read: > --- Insert as superuser > delete from ap.table1 > Insert into ap.table1 values (12) --- permission issue inserting into table1 > , (SUPERUSER can't access schema ap) On Tue, Mar 10, 2015 at 8:18 AM, PT wrote: > > I've read this email

Re: [GENERAL] Strange security issue with Superuser access

2015-03-10 Thread PT
I've read this email over multiple times, and I don't understand what your question is. I don't see what it is that you think is working in an unexpected way, all the situations I see described you claim work. Did you possible forget to put something in the email or am I just a poor reader? On Mo

[GENERAL] Strange security issue with Superuser access

2015-03-09 Thread Andrzej Pilacik
I ran into this yesterday and I wanted to post this to see if this is working as expected or it is a bug. By creating 2 tables and creating a FK between them and then changing the owner of the tables to a group, I lost the ability to insert into the first table executing as SUPERUSER. I thought th