]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Fix misbehavior of DROP OWNED BY with duplicate polroles entries.
authorTom Lane <tgl@sss.pgh.pa.us>
Fri, 18 Jun 2021 22:00:09 +0000 (18:00 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Fri, 18 Jun 2021 22:00:09 +0000 (18:00 -0400)
commitea5ae3ae1ab0793d3d6125ff19b79e4c413a2688
tree3e6e94751f5ad59a05be5ddd8c65ea112f5b82dd
parent4b8b3562e1e6e5b4abd5e9326f71af73e98dc604
Fix misbehavior of DROP OWNED BY with duplicate polroles entries.

Ordinarily, a pg_policy.polroles array wouldn't list the same role
more than once; but CREATE POLICY does not prevent that.  If we
perform DROP OWNED BY on a role that is listed more than once,
RemoveRoleFromObjectPolicy either suffered an assertion failure
or encountered a tuple-updated-by-self error.  Rewrite it to cope
correctly with duplicate entries, and add a CommandCounterIncrement
call to prevent the other problem.

Per discussion, there's other cleanup that ought to happen here,
but this seems like the minimum essential fix.

Per bug #17062 from Alexander Lakhin.  It's been broken all along,
so back-patch to all supported branches.

Discussion: https://postgr.es/m/17062-11f471ae3199ca23@postgresql.org
src/backend/commands/policy.c
src/test/regress/expected/rowsecurity.out
src/test/regress/sql/rowsecurity.sql