Remove any-user DML capability from allow_system_table_mods
authorPeter Eisentraut <peter@eisentraut.org>
Fri, 29 Nov 2019 09:04:45 +0000 (10:04 +0100)
committerPeter Eisentraut <peter@eisentraut.org>
Fri, 29 Nov 2019 09:22:13 +0000 (10:22 +0100)
commit508bf95b767140ec1a339bcb53538d21deb9d995
treed9d21786d8875f1b7c4a787954c14a5a08b5b01d
parentd4feadeca1591fd5fe91bdf73a7897553f5366d7
Remove any-user DML capability from allow_system_table_mods

Previously, allow_system_table_mods allowed a non-superuser to do DML
on a system table without further permission checks.  This has been
removed, as it was quite inconsistent with the rest of the meaning of
this setting.  (Since allow_system_table_mods was previously only
accessible with a server restart, it is unlikely that anyone was using
this possibility.)

Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us>
Discussion: https://www.postgresql.org/message-id/flat/8b00ea5e-28a7-88ba-e848-21528b632354%402ndquadrant.com
src/backend/catalog/aclchk.c