"Takahiro Itagaki" <itagaki.takahiro@oss.ntt.co.jp> writes:
> Even if a non-superuser who has no permissions on
> a parent and a child tables, he can retrieve data
> from the parent when the two tables have inheritance
> relationship.
Hmm, the change to not check child permissions is intentional, but
it looks like Peter overdid it ...
2009-10-23 01:24 petere
* doc/src/sgml/ddl.sgml, src/backend/optimizer/prep/prepunion.c,
src/test/regress/expected/privileges.out,
src/test/regress/sql/privileges.sql: When querying a table with
child tables, do not check permissions on the child tables. This
was found to be useless and confusing in virtually all cases, and
also contrary to the SQL standard.
regards, tom lane