Re: [HACKERS] Re: [BUGS] BUG #13694: Row Level Security by-passed with CREATEUSER permission

2015-10-22 Thread Tom Lane
Stephen Frost writes: > * Joe Conway (m...@joeconway.com) wrote: >> On 10/21/2015 12:46 PM, Tom Lane wrote: >>> Attached patch rips out CREATEUSER and NOCREATEUSER options lock, stock, >>> and barrel. >> Looks good to me. >>> Another possibility is to change them to actually

Re: [HACKERS] Re: [BUGS] BUG #13694: Row Level Security by-passed with CREATEUSER permission

2015-10-22 Thread Stephen Frost
* Joe Conway (m...@joeconway.com) wrote: > On 10/21/2015 12:46 PM, Tom Lane wrote: > > Attached patch rips out CREATEUSER and NOCREATEUSER options lock, stock, > > and barrel. > > Looks good to me. > > > Another possibility is to change them to actually mean CREATEROLE and > > NOCREATEROLE. I

[HACKERS] Re: [BUGS] BUG #13694: Row Level Security by-passed with CREATEUSER permission

2015-10-21 Thread Joe Conway
On 10/21/2015 12:46 PM, Tom Lane wrote: > Attached patch rips out CREATEUSER and NOCREATEUSER options lock, stock, > and barrel. Looks good to me. > Another possibility is to change them to actually mean CREATEROLE and > NOCREATEROLE. I think probably a clean break is better though. I think