]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
authorNoah Misch <noah@leadboat.com>
Sat, 16 Nov 2024 04:39:56 +0000 (20:39 -0800)
committerNoah Misch <noah@leadboat.com>
Sat, 16 Nov 2024 04:40:00 +0000 (20:40 -0800)
commitbe062bfa54d780c07a3b36c4123da2c960c8e97d
tree8abbe509e6c870915cd1728ca06746fc1cb27f49
parent26c4e896869093f07e9acb982f71bb3c4dae5901
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.

After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions.  Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command.  If cherry-picking the CVE-2024-10978 fixes, default to
including this, too.  (This fixes an unintended side effect of fixing
CVE-2024-10978.)  Back-patch to v12, like that commit.  The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.

Tom Lane and Noah Misch.  Reported by Etienne LAFARGE.

Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
src/backend/utils/init/miscinit.c
src/backend/utils/misc/guc.c
src/test/modules/unsafe_tests/Makefile
src/test/modules/unsafe_tests/expected/setconfig.out [new file with mode: 0644]
src/test/modules/unsafe_tests/sql/setconfig.sql [new file with mode: 0644]