Make currtid() functions require SELECT privileges on the target table.
authorTom Lane <tgl@sss.pgh.pa.us>
Mon, 27 Aug 2007 00:57:36 +0000 (00:57 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Mon, 27 Aug 2007 00:57:36 +0000 (00:57 +0000)
commitf1f475cf3e60319037b6078300671c5ae0d88fd7
treed879370562d66b424f04002711b9e37ea1ccb390
parent1dd9998befe1c2a84ceb50e776b29fd316eab463
Make currtid() functions require SELECT privileges on the target table.
While it's not clear that TID linkage info is of any great use to a
nefarious user, it's certainly unexpected that these functions wouldn't
insist on read privileges.
src/backend/utils/adt/tid.c