From 7bae5a289c8fbe33aceb56f04e273eee2c1e7c39 Mon Sep 17 00:00:00 2001
From: Tom Lane
Date: Tue, 5 Sep 2006 21:08:36 +0000
Subject: Get rid of the separate RULE privilege for tables: now only a table's
 owner can create or modify rules for the table.  Do setRuleCheckAsUser()
 while loading rules into the relcache, rather than when defining a rule. 
 This ensures that permission checks for tables referenced in a rule are done
 with respect to the current owner of the rule's table, whereas formerly ALTER
 TABLE OWNER would fail to update the permission checking for associated
 rules. Removal of separate RULE privilege is needed to prevent various
 scenarios in which a grantee of RULE privilege could effectively have any
 privilege of the table owner.  For backwards compatibility, GRANT/REVOKE RULE
 is still accepted, but it doesn't do anything.  Per discussion here:
 http://archives.postgresql.org/pgsql-hackers/2006-04/msg01138.php

---
 src/include/nodes/parsenodes.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/include/nodes')

diff --git a/src/include/nodes/parsenodes.h b/src/include/nodes/parsenodes.h
index 40708404fcc..0b9de4905d1 100644
--- a/src/include/nodes/parsenodes.h
+++ b/src/include/nodes/parsenodes.h
@@ -7,7 +7,7 @@
  * Portions Copyright (c) 1996-2006, PostgreSQL Global Development Group
  * Portions Copyright (c) 1994, Regents of the University of California
  *
- * $PostgreSQL: pgsql/src/include/nodes/parsenodes.h,v 1.329 2006/09/03 03:19:45 momjian Exp $
+ * $PostgreSQL: pgsql/src/include/nodes/parsenodes.h,v 1.330 2006/09/05 21:08:36 tgl Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -50,7 +50,7 @@ typedef uint32 AclMode;			/* a bitmask of privilege bits */
 #define ACL_SELECT		(1<<1)
 #define ACL_UPDATE		(1<<2)
 #define ACL_DELETE		(1<<3)
-#define ACL_RULE		(1<<4)
+/* #define ACL_RULE		(1<<4)	unused, available */
 #define ACL_REFERENCES	(1<<5)
 #define ACL_TRIGGER		(1<<6)
 #define ACL_EXECUTE		(1<<7)	/* for functions */
-- 
cgit v1.2.3