Disregard superuserness when checking to see if a role GRANT would
authorTom Lane <tgl@sss.pgh.pa.us>
Fri, 4 Nov 2005 17:25:15 +0000 (17:25 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Fri, 4 Nov 2005 17:25:15 +0000 (17:25 +0000)
commit1d56f7d57250ef7aec2e54795d19e7d2a0cdaeff
treef0dae5b98dd61e411fd458a1841c866414de90ce
parent9669c86322744f4bf6f836b1993c6c5d35616d71
Disregard superuserness when checking to see if a role GRANT would
create circularity of role memberships.  This is a minimum-impact fix
for the problem reported by Florian Pflug.  I thought about removing
the superuser_arg test from is_member_of_role() altogether, as it seems
redundant for many of the callers --- but not all, and it's way too late
in the 8.1 cycle to be making large changes.  Perhaps reconsider this
later.
src/backend/commands/user.c
src/backend/utils/adt/acl.c
src/include/utils/acl.h