]> git.ipfire.org Git - thirdparty/postgresql.git/commit
doc: Granting TRIGGER or REFERENCES on table is dangerous.
authorRobert Haas <rhaas@postgresql.org>
Mon, 20 Jul 2026 17:36:39 +0000 (13:36 -0400)
committerRobert Haas <rhaas@postgresql.org>
Mon, 20 Jul 2026 17:36:39 +0000 (13:36 -0400)
commit17e805e8d8152db474bb368ab95cac127dfe6a4f
treec840b98f23546afa81373de72f2a5a5d4ed0e1b5
parentd049a31a4cd2d43739ae0039002c24c63a24d48c
doc: Granting TRIGGER or REFERENCES on table is dangerous.

It's always been the case that granting these privileges to users that
you don't fully trust was a bad idea, but it hasn't always been
obvious to people reading the documentation that this is the case.
To prevent confusion, and also repeated reports to pgsql-security,
mention it explicitly.

Discussion: http://postgr.es/m/CA+TgmobrjCHBuWHrvX3=2vndUCO2thUOdevrCcMDFW86cqCYvw@mail.gmail.com
Reviewed-by: Nathan Bossart <nathandbossart@gmail.com>
Backpatch-through: 14
doc/src/sgml/ddl.sgml