KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com> writes:
> Hmm. If both REFERENCES and SELECT privilege are required to create
> a new FK constraint, why RI_Initial_Check() need to check SELECT
> permission prior to SPI_execute()?
> It eventually checks SELECT privilege during execution of the secondary
> query. It is unclear for me why we need to provide a slower fallback.
Because the queries inside the triggers are done with a different
current userid.
regards, tom lane