From d54165988c69a021962adaad6e2e31f80f4ad85c Mon Sep 17 00:00:00 2001 From: Euler Taveira Date: Tue, 1 Jun 2021 11:17:26 -0300 Subject: [PATCH] Grant read privilege to additional pg_subscription columns pg_subscription should be read by PUBLIC except subconninfo column. Documentation is correct but the GRANT command is not. Columns oid and subsynccommit don't have the right privileges. It seems an oversight in the commits 6f236e1eb8c and 887227a1cc8. The current behavior prohibits joins between pg_subscription and related tables (pg_subscription_rel and pg_stat_subscription) for non-superusers. --- src/backend/catalog/system_views.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/backend/catalog/system_views.sql b/src/backend/catalog/system_views.sql index 51d738cc42..eb363c9ade 100644 --- a/src/backend/catalog/system_views.sql +++ b/src/backend/catalog/system_views.sql @@ -1122,7 +1122,7 @@ REVOKE ALL ON pg_replication_origin_status FROM public; -- All columns of pg_subscription except subconninfo are readable. REVOKE ALL ON pg_subscription FROM public; -GRANT SELECT (subdbid, subname, subowner, subenabled, subslotname, subpublications) +GRANT SELECT (oid, subdbid, subname, subowner, subenabled, subslotname, subsynccommit, subpublications) ON pg_subscription TO public; -- 2.20.1