• Noah Misch's avatar
    Again match pg_user_mappings to information_schema.user_mapping_options. · e568e1ee
    Noah Misch authored
    Commit 3eefc510 claimed to make
    pg_user_mappings enforce the qualifications user_mapping_options had
    been enforcing, but its removal of a longstanding restriction left them
    distinct when the current user is the subject of a mapping yet has no
    server privileges.  user_mapping_options emits no rows for such a
    mapping, but pg_user_mappings includes full umoptions.  Change
    pg_user_mappings to show null for umoptions.  Back-patch to 9.2, like
    the above commit.
    
    Reviewed by Tom Lane.  Reported by Jeff Janes.
    
    Security: CVE-2017-7547
    e568e1ee
rules.out 116 KB