Hi, I'm reviewing LO-AC patch. KaiGai Kohei <kai...@ak.jp.nec.com> wrote: > Nothing are changed in other codes, including something corresponding to > in-place upgrading. I'm waiting for suggestion.
I have a question about the behavior -- the patch adds ownership management of large objects. Non-privileged users cannot read, write, or drop othere's LOs. But they can read the contents of large object when they read pg_catalog.pg_largeobject directly. Even if the patch is applied, we still allow "SELECT * FROM pg_largeobject" ...right? This issue might be solved by the core SE-PgSQL patch, but what should we do fo now? Other changes in the patch seem to be reasonable. "GRANT/REVOKE ON LARGE OBJECT <number>" might be hard to use if used alone, but we can use the commands as dynamic SQLs in DO statements if we want to grant or revoke privileges in bulk. "SELECT oid FROM pg_largeobject_metadata" is used in some places instead of "SELECT DISTINCT loid FROM pg_largeobject". They return the same result, but the former will be faster because we don't use DISTINCT. pg_dump will be slightly accelerated by the new query. Regards, --- Takahiro Itagaki NTT Open Source Software Center -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers