mirror of
https://github.com/postgres/postgres.git
synced 2025-07-28 23:42:10 +03:00
Allow pg_monitor to execute pg_current_logfile().
We allow roles with privileges of pg_monitor to execute functions like pg_ls_logdir(), so it seems natural that such roles would also be able to execute this function. Bumps catversion. Co-authored-by: Pavlo Golub Reviewed-by: Daniel Gustafsson Discussion: https://postgr.es/m/CAK7ymcLmEYWyQkiCZ64WC-HCzXAB0omM%3DYpj9B3rXe8vUAFMqw%40mail.gmail.com
This commit is contained in:
@ -23735,6 +23735,11 @@ SELECT * FROM pg_ls_dir('.') WITH ORDINALITY AS t(ls,n);
|
|||||||
<xref linkend="guc-log-destination"/>.
|
<xref linkend="guc-log-destination"/>.
|
||||||
The result reflects the contents of
|
The result reflects the contents of
|
||||||
the <filename>current_logfiles</filename> file.
|
the <filename>current_logfiles</filename> file.
|
||||||
|
</para>
|
||||||
|
<para>
|
||||||
|
This function is restricted to superusers and roles with privileges of
|
||||||
|
the <literal>pg_monitor</literal> role by default, but other users can
|
||||||
|
be granted EXECUTE to run the function.
|
||||||
</para></entry>
|
</para></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
|
@ -777,6 +777,10 @@ GRANT EXECUTE ON FUNCTION pg_ls_logicalmapdir() TO pg_monitor;
|
|||||||
|
|
||||||
GRANT EXECUTE ON FUNCTION pg_ls_replslotdir(text) TO pg_monitor;
|
GRANT EXECUTE ON FUNCTION pg_ls_replslotdir(text) TO pg_monitor;
|
||||||
|
|
||||||
|
GRANT EXECUTE ON FUNCTION pg_current_logfile() TO pg_monitor;
|
||||||
|
|
||||||
|
GRANT EXECUTE ON FUNCTION pg_current_logfile(text) TO pg_monitor;
|
||||||
|
|
||||||
GRANT pg_read_all_settings TO pg_monitor;
|
GRANT pg_read_all_settings TO pg_monitor;
|
||||||
|
|
||||||
GRANT pg_read_all_stats TO pg_monitor;
|
GRANT pg_read_all_stats TO pg_monitor;
|
||||||
|
@ -57,6 +57,6 @@
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
/* yyyymmddN */
|
/* yyyymmddN */
|
||||||
#define CATALOG_VERSION_NO 202402141
|
#define CATALOG_VERSION_NO 202402142
|
||||||
|
|
||||||
#endif
|
#endif
|
||||||
|
@ -683,3 +683,23 @@ SELECT gist_stratnum_identity(18::smallint);
|
|||||||
18
|
18
|
||||||
(1 row)
|
(1 row)
|
||||||
|
|
||||||
|
-- pg_current_logfile
|
||||||
|
CREATE ROLE regress_current_logfile;
|
||||||
|
-- not available by default
|
||||||
|
SELECT has_function_privilege('regress_current_logfile',
|
||||||
|
'pg_current_logfile()', 'EXECUTE');
|
||||||
|
has_function_privilege
|
||||||
|
------------------------
|
||||||
|
f
|
||||||
|
(1 row)
|
||||||
|
|
||||||
|
GRANT pg_monitor TO regress_current_logfile;
|
||||||
|
-- role has privileges of pg_monitor and can execute the function
|
||||||
|
SELECT has_function_privilege('regress_current_logfile',
|
||||||
|
'pg_current_logfile()', 'EXECUTE');
|
||||||
|
has_function_privilege
|
||||||
|
------------------------
|
||||||
|
t
|
||||||
|
(1 row)
|
||||||
|
|
||||||
|
DROP ROLE regress_current_logfile;
|
||||||
|
@ -254,3 +254,14 @@ FROM pg_walfile_name_offset('0/0'::pg_lsn + :segment_size - 1),
|
|||||||
-- test stratnum support functions
|
-- test stratnum support functions
|
||||||
SELECT gist_stratnum_identity(3::smallint);
|
SELECT gist_stratnum_identity(3::smallint);
|
||||||
SELECT gist_stratnum_identity(18::smallint);
|
SELECT gist_stratnum_identity(18::smallint);
|
||||||
|
|
||||||
|
-- pg_current_logfile
|
||||||
|
CREATE ROLE regress_current_logfile;
|
||||||
|
-- not available by default
|
||||||
|
SELECT has_function_privilege('regress_current_logfile',
|
||||||
|
'pg_current_logfile()', 'EXECUTE');
|
||||||
|
GRANT pg_monitor TO regress_current_logfile;
|
||||||
|
-- role has privileges of pg_monitor and can execute the function
|
||||||
|
SELECT has_function_privilege('regress_current_logfile',
|
||||||
|
'pg_current_logfile()', 'EXECUTE');
|
||||||
|
DROP ROLE regress_current_logfile;
|
||||||
|
Reference in New Issue
Block a user