Re: TODO item: set proper permissions on non-system schemas

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: TODO item: set proper permissions on non-system schemas
Дата
Msg-id 12004.1125580187@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: TODO item: set proper permissions on non-system schemas  (Andrew - Supernews <andrew+nonews@supernews.com>)
Список pgsql-hackers
Andrew - Supernews <andrew+nonews@supernews.com> writes:
> On 2005-09-01, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> There's considerable feeling that that TODO item is bogus anyway.

> The issue that I've seen is that currently, allowing non-superusers to
> create databases in a useful manner requires all sorts of hoop-jumping
> to allow the database owner to end up owning the "public" schema.

The part of this that hasn't been justified to my satisfaction is *why*
the database owner should own the public schema.  He doesn't get to own,
say, the integer plus operator.

There is some merit in the thought that the DB owner should be able to
grant and revoke access on the public schema, but that no longer
requires ownership, only membership in an appropriate role.

> (Another wart that could do with looking into is that such a non-superuser
> database owner can't prevent xid wrap in his database regardless of how
> often he vacuums it.)

The DB owner shouldn't really be responsible for vacuuming anyway.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: On hardcoded type aliases and typmod for user types
Следующее
От: Tom Lane
Дата:
Сообщение: Re: broken configure, broken makefile?