diff options
| author | Michael Paquier <michael@paquier.xyz> | 2020-06-14 12:40:37 +0900 |
|---|---|---|
| committer | Michael Paquier <michael@paquier.xyz> | 2020-06-14 12:40:37 +0900 |
| commit | cc072641d41c55c6aa24a331fc1f8029e0a8d799 (patch) | |
| tree | b2e41e350248c66fc5528a380150795ccc13f349 /doc/src | |
| parent | 23cbeda50b94c817bed4f7d2127ee09c4e8c8b86 (diff) | |
| download | postgresql-cc072641d41c55c6aa24a331fc1f8029e0a8d799.tar.gz postgresql-cc072641d41c55c6aa24a331fc1f8029e0a8d799.zip | |
Replace superuser check by ACLs for replication origin functions
This patch removes the hardcoded check for superuser privileges when
executing replication origin functions. Instead, execution is revoked
from public, meaning that those functions can be executed by a superuser
and that access to them can be granted.
Author: Martín Marqués
Reviewed-by: Kyotaro Horiguchi, Michael Paquier, Masahiko Sawada
Discussion: https:/postgr.es/m/CAPdiE1xJMZOKQL3dgHMUrPqysZkgwzSMXETfKkHYnBAB7-0VRQ@mail.gmail.com
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/func.sgml | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/src/sgml/func.sgml b/doc/src/sgml/func.sgml index a8d57f4e39a..b65aa28f344 100644 --- a/doc/src/sgml/func.sgml +++ b/doc/src/sgml/func.sgml @@ -24614,7 +24614,9 @@ postgres=# SELECT * FROM pg_walfile_name_offset(pg_stop_backup()); <xref linkend="streaming-replication-slots"/>, and <xref linkend="replication-origins"/> for information about the underlying features. - Use of functions for replication origin is restricted to superusers. + Use of functions for replication origin is only allowed to the + superuser by default, but may be allowed to other users by using the + <literal>GRANT</literal> command. Use of functions for replication slots is restricted to superusers and users having <literal>REPLICATION</literal> privilege. </para> |