Tomas Vondra <[email protected]> writes: > Anyway, I'm wondering if we need the REVOKE/GRANT on pg_statistic_ext at > all, and if we do if we should just remove the list of columns, and > grant SELECT on all. All the sensitive columns were moved to another > catalog, after all.
+1. Per-column permissions checks seem pointlessly inefficient here.
> That also reminds me the patch should have revoked access to the new
> _data catalog.
Uh ... yeah.
regards, tom lane
