Robert Haas <[email protected]> writes:
> On Mon, Feb 17, 2025 at 5:18 PM David G. Johnston
> <[email protected]> wrote:
>>> I have a very vague recollection that we concluded that SELECT
>>> privilege was a reasonable check because if you have that you
>>> could manually prewarm by reading the table. That would lead
>>> to the conclusion that the minimal fix is to look at the owning
>>> table's privileges instead of the index's own privileges.
>> I feel like if you can blow up the cache by loading an entire table into
>> memory with just select privilege on the table we should be ok with allowing
>> the same person to name an index on the same table and load it into the
>> cache too.
> +1.
Is that a +1 for the specific design of "check SELECT on the index's
table", or just a +1 for changing something here?
regards, tom lane
