Re: ALTER ROLE/DATABASE RESET ALL versus security

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: ALTER ROLE/DATABASE RESET ALL versus security
Дата
Msg-id 11780.1268927987@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: ALTER ROLE/DATABASE RESET ALL versus security  (Alvaro Herrera <alvherre@commandprompt.com>)
Ответы Re: ALTER ROLE/DATABASE RESET ALL versus security  (Alvaro Herrera <alvherre@commandprompt.com>)
Список pgsql-hackers
Alvaro Herrera <alvherre@commandprompt.com> writes:
> I have come up with the attached patch.  I haven't tested it fully yet,
> and I need to backport it.  The gist of it is: we can't simply remove
> the pg_db_role_setting tuple, we need to ask GUC to reset the settings
> array, for which it checks superuser-ness on each setting.

I think you still want to have a code path whereby the tuple will be
deleted once the array is empty.  Failing to check that is inefficient
and also exposes clients such as pg_dump to corner case bugs.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Chris Browne
Дата:
Сообщение: Re: An idle thought
Следующее
От: Pavel Stehule
Дата:
Сообщение: Re: WIP: shared ispell dictionary