Allow users with BYPASSRLS to alter their own passwords.
authorTom Lane <tgl@sss.pgh.pa.us>
Tue, 3 Nov 2020 20:41:32 +0000 (15:41 -0500)
committerTom Lane <tgl@sss.pgh.pa.us>
Tue, 3 Nov 2020 20:41:32 +0000 (15:41 -0500)
commitd907bd0543aa63e59653d7345840bed0f8b3a83b
treecc7718e4d1618c49087a7fccddd9ffa958e4933c
parentbf797a8d9768239f5e3204b013044274b2c7c24a
Allow users with BYPASSRLS to alter their own passwords.

The intention in commit 491c029db was to require superuserness to
change the BYPASSRLS property, but the actual effect of the coding
in AlterRole() was to require superuserness to change anything at all
about a BYPASSRLS role.  Other properties of a BYPASSRLS role should
be changeable under the same rules as for a normal role, though.

Fix that, and also take care of some documentation omissions related
to BYPASSRLS and REPLICATION role properties.

Tom Lane and Stephen Frost, per bug report from Wolfgang Walther.
Back-patch to all supported branches.

Discussion: https://postgr.es/m/a5548a9f-89ee-3167-129d-162b5985fcf8@technowledgy.de
doc/src/sgml/ref/alter_role.sgml
doc/src/sgml/ref/create_role.sgml
src/backend/commands/user.c