pgsql: Allow users with BYPASSRLS to alter their own passwords. - Mailing list pgsql-committers

From Tom Lane
Subject pgsql: Allow users with BYPASSRLS to alter their own passwords.
Date
Msg-id E1ka37s-0005nr-RZ@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Allow users with BYPASSRLS to alter their own passwords.

The intention in commit 491c029db was to require superuserness to
change the BYPASSRLS property, but the actual effect of the coding
in AlterRole() was to require superuserness to change anything at all
about a BYPASSRLS role.  Other properties of a BYPASSRLS role should
be changeable under the same rules as for a normal role, though.

Fix that, and also take care of some documentation omissions related
to BYPASSRLS and REPLICATION role properties.

Tom Lane and Stephen Frost, per bug report from Wolfgang Walther.
Back-patch to all supported branches.

Discussion: https://postgr.es/m/a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de

Branch
------
REL_12_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/136f87ea57b3a7a6bf64c832a5e1b69e18091775

Modified Files
--------------
doc/src/sgml/ref/alter_role.sgml  |  4 +++-
doc/src/sgml/ref/create_role.sgml | 11 +++++++++--
src/backend/commands/user.c       | 10 ++++++----
3 files changed, 18 insertions(+), 7 deletions(-)


pgsql-committers by date:

Previous
From: Peter Eisentraut
Date:
Subject: pgsql: Disallow ALTER TABLE ONLY / DROP EXPRESSION
Next
From: Tom Lane
Date:
Subject: pgsql: Improve error messages around REPLICATION and BYPASSRLS properti