mirror of
https://github.com/postgres/postgres.git
synced 2025-11-10 17:42:29 +03:00
Fix permission-checking bug reported by Tim Burgess 10-Feb-03 (this time
for sure...). Rather than relying on the query context of a rangetable entry to identify what permissions it wants checked, store a full AclMode mask in each RTE, and check exactly those bits. This allows an RTE specifying, say, INSERT privilege on a view to be copied into a derived UPDATE query without changing meaning. Per recent discussion thread. initdb forced due to change of stored rule representation.
This commit is contained in:
@@ -15,7 +15,7 @@
|
||||
* Portions Copyright (c) 1994, Regents of the University of California
|
||||
*
|
||||
* IDENTIFICATION
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/copyfuncs.c,v 1.276 2004/01/10 23:28:44 neilc Exp $
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/copyfuncs.c,v 1.277 2004/01/14 23:01:54 tgl Exp $
|
||||
*
|
||||
*-------------------------------------------------------------------------
|
||||
*/
|
||||
@@ -1258,8 +1258,7 @@ _copyRangeTblEntry(RangeTblEntry *from)
|
||||
COPY_NODE_FIELD(eref);
|
||||
COPY_SCALAR_FIELD(inh);
|
||||
COPY_SCALAR_FIELD(inFromCl);
|
||||
COPY_SCALAR_FIELD(checkForRead);
|
||||
COPY_SCALAR_FIELD(checkForWrite);
|
||||
COPY_SCALAR_FIELD(requiredPerms);
|
||||
COPY_SCALAR_FIELD(checkAsUser);
|
||||
|
||||
return newnode;
|
||||
|
||||
@@ -18,7 +18,7 @@
|
||||
* Portions Copyright (c) 1994, Regents of the University of California
|
||||
*
|
||||
* IDENTIFICATION
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/equalfuncs.c,v 1.214 2004/01/10 23:28:45 neilc Exp $
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/equalfuncs.c,v 1.215 2004/01/14 23:01:55 tgl Exp $
|
||||
*
|
||||
*-------------------------------------------------------------------------
|
||||
*/
|
||||
@@ -1574,8 +1574,7 @@ _equalRangeTblEntry(RangeTblEntry *a, RangeTblEntry *b)
|
||||
COMPARE_NODE_FIELD(eref);
|
||||
COMPARE_SCALAR_FIELD(inh);
|
||||
COMPARE_SCALAR_FIELD(inFromCl);
|
||||
COMPARE_SCALAR_FIELD(checkForRead);
|
||||
COMPARE_SCALAR_FIELD(checkForWrite);
|
||||
COMPARE_SCALAR_FIELD(requiredPerms);
|
||||
COMPARE_SCALAR_FIELD(checkAsUser);
|
||||
|
||||
return true;
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
*
|
||||
*
|
||||
* IDENTIFICATION
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/outfuncs.c,v 1.229 2004/01/06 04:31:01 tgl Exp $
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/outfuncs.c,v 1.230 2004/01/14 23:01:55 tgl Exp $
|
||||
*
|
||||
* NOTES
|
||||
* Every node type that can appear in stored rules' parsetrees *must*
|
||||
@@ -1358,9 +1358,8 @@ _outRangeTblEntry(StringInfo str, RangeTblEntry *node)
|
||||
|
||||
WRITE_BOOL_FIELD(inh);
|
||||
WRITE_BOOL_FIELD(inFromCl);
|
||||
WRITE_BOOL_FIELD(checkForRead);
|
||||
WRITE_BOOL_FIELD(checkForWrite);
|
||||
WRITE_OID_FIELD(checkAsUser);
|
||||
WRITE_UINT_FIELD(requiredPerms);
|
||||
WRITE_UINT_FIELD(checkAsUser);
|
||||
}
|
||||
|
||||
static void
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
*
|
||||
*
|
||||
* IDENTIFICATION
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/readfuncs.c,v 1.164 2004/01/07 18:56:26 neilc Exp $
|
||||
* $PostgreSQL: pgsql/src/backend/nodes/readfuncs.c,v 1.165 2004/01/14 23:01:55 tgl Exp $
|
||||
*
|
||||
* NOTES
|
||||
* Path and Plan nodes do not have any readfuncs support, because we
|
||||
@@ -939,9 +939,8 @@ _readRangeTblEntry(void)
|
||||
|
||||
READ_BOOL_FIELD(inh);
|
||||
READ_BOOL_FIELD(inFromCl);
|
||||
READ_BOOL_FIELD(checkForRead);
|
||||
READ_BOOL_FIELD(checkForWrite);
|
||||
READ_OID_FIELD(checkAsUser);
|
||||
READ_UINT_FIELD(requiredPerms);
|
||||
READ_UINT_FIELD(checkAsUser);
|
||||
|
||||
READ_DONE();
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user