pgsql: Allow users with BYPASSRLS to alter their own passwords.

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Allow users with BYPASSRLS to alter their own passwords.
Date: 2020-11-03 20:41:56
Message-ID: [email protected]
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Allow users with BYPASSRLS to alter their own passwords.

The intention in commit 491c029db was to require superuserness to
change the BYPASSRLS property, but the actual effect of the coding
in AlterRole() was to require superuserness to change anything at all
about a BYPASSRLS role. Other properties of a BYPASSRLS role should
be changeable under the same rules as for a normal role, though.

Fix that, and also take care of some documentation omissions related
to BYPASSRLS and REPLICATION role properties.

Tom Lane and Stephen Frost, per bug report from Wolfgang Walther.
Back-patch to all supported branches.

Discussion: https://postgr.es/m/[email protected]

Branch
------
REL_13_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/768dbef0d49826c2e404ceb1567b3cc9e2bbc30a

Modified Files
--------------
doc/src/sgml/ref/alter_role.sgml | 4 +++-
doc/src/sgml/ref/create_role.sgml | 11 +++++++++--
src/backend/commands/user.c | 10 ++++++----
3 files changed, 18 insertions(+), 7 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Tom Lane 2020-11-03 20:49:11 pgsql: Improve error messages around REPLICATION and BYPASSRLS properti
Previous Message Peter Eisentraut 2020-11-03 14:50:54 pgsql: Disallow ALTER TABLE ONLY / DROP EXPRESSION