• Stephen Frost's avatar
    Remove superuser checks in pgstattuple · fd321a1d
    Stephen Frost authored
    Now that we track initial privileges on extension objects and changes to
    those permissions, we can drop the superuser() checks from the various
    functions which are part of the pgstattuple extension and rely on the
    GRANT system to control access to those functions.
    
    Since a pg_upgrade will preserve the version of the extension which
    existed prior to the upgrade, we can't simply modify the existing
    functions but instead need to create new functions which remove the
    checks and update the SQL-level functions to use the new functions
    (and to REVOKE EXECUTE rights on those functions from PUBLIC).
    
    Thanks to Tom and Andres for adding support for extensions to follow
    update paths (see: 40b449ae), allowing this patch to be much smaller
    since no new base version script needed to be included.
    
    Approach suggested by Noah.
    
    Reviewed by Michael Paquier.
    fd321a1d
pgstattuple.sgml 15.1 KB