postgresql/src/backend
Alexander Korotkov 3ca43dbbb6 Add permission check for MERGE/SPLIT partition operations
Currently, we check only owner permission for the parent table before
MERGE/SPLIT partition operations.  This leads to a security hole when users
can get access to the data of partitions without permission.  This commit
fixes this problem by requiring owner permission on all the partitions
involved.

Reported-by: Alexander Lakhin
Discussion: https://postgr.es/m/0520c72e-8d97-245e-53f9-173beca2ab2e%40gmail.com
Author: Dmitry Koval, Alexander Korotkov
2024-05-13 00:00:21 +03:00
..
access Fix an assortment of typos 2024-05-04 02:33:25 +12:00
archive Add built-in ERROR handling for archive callbacks. 2024-04-02 22:28:11 -05:00
backup Fix unnecessary padding in incremental backups 2024-04-14 20:37:49 +02:00
bootstrap Remove unused #include's from backend .c files 2024-03-04 12:02:20 +01:00
catalog Fix inconsistencies in error messages 2024-05-09 13:31:22 +02:00
commands Repair ALTER EXTENSION ... SET SCHEMA. 2024-05-09 12:19:52 -04:00
executor Fix ON CONFLICT DO NOTHING/UPDATE for temporal indexes 2024-05-10 14:55:31 +02:00
foreign Remove unused #include's from backend .c files 2024-03-04 12:02:20 +01:00
jit Remove dead code 2024-04-17 10:48:04 +02:00
lib Revert: Implement pg_wal_replay_wait() stored procedure 2024-04-11 17:28:15 +03:00
libpq Reject SSL connection if ALPN is used but there's no common protocol 2024-04-29 18:12:26 +03:00
main Remove unused #include's from backend .c files 2024-03-04 12:02:20 +01:00
nodes Fix query pullup issue with WindowClause runCondition 2024-05-05 12:54:46 +12:00
optimizer Fix ON CONFLICT DO NOTHING/UPDATE for temporal indexes 2024-05-10 14:55:31 +02:00
parser Add permission check for MERGE/SPLIT partition operations 2024-05-13 00:00:21 +03:00
partitioning Fix error message in check_partition_bounds_for_split_range() 2024-04-30 12:00:39 +03:00
po Translation updates 2024-05-06 12:06:31 +02:00
port Remove unused #include's from backend .c files 2024-03-04 12:02:20 +01:00
postmaster Avoid repeating loads of frozen ID values. 2024-04-29 10:25:33 -07:00
regex Support C.UTF-8 locale in the new builtin collation provider. 2024-03-19 15:24:41 -07:00
replication Fix incorrect format placeholder 2024-05-08 08:37:46 +02:00
rewrite Fix assorted bugs related to identity column in partitioned tables 2024-05-07 22:50:00 +02:00
snowball Remove unused #include's from backend .c files 2024-03-04 12:02:20 +01:00
statistics Fix typos and duplicate words 2024-04-18 21:28:07 +02:00
storage Fix typos and incorrect type in read_stream.c 2024-05-01 17:04:52 +12:00
tcop Post-commit review fixes for slot synchronization. 2024-04-25 14:01:44 +05:30
tsearch Remove unused #include's from backend .c files 2024-03-04 12:02:20 +01:00
utils Introduce private data area for injection points 2024-05-12 18:53:06 +09:00
.gitignore Add .gitignore entries for AIX-specific intermediate build artifacts. 2015-07-08 20:44:22 -04:00
common.mk Blind attempt to fix LLVM dependency in the backend 2022-09-15 10:53:48 +07:00
Makefile Rework lwlocknames.txt to become lwlocklist.h 2024-03-20 11:55:20 +01:00
meson.build Remove AIX support 2024-02-28 15:17:23 +04:00
nls.mk Remove distprep 2023-11-06 15:18:04 +01:00