BUG #15095: schema's owner can drop object's in his schema

Поиск
Список
Период
Сортировка
От PG Bug reporting form
Тема BUG #15095: schema's owner can drop object's in his schema
Дата
Msg-id 151998208792.21241.17927301443532986481@wrigleys.postgresql.org
обсуждение исходный текст
Ответы Re: BUG #15095: schema's owner can drop object's in his schema
Список pgsql-bugs
The following bug has been logged on the website:

Bug reference:      15095
Logged by:          Zhou Digoal
Email address:      digoal@126.com
PostgreSQL version: 10.2
Operating system:   centos 7.x x64
Description:

Schema's owner can drop object's in his schema, I think this is an risk if
multi-user use the same schema. 

exp:

```
postgres=# create database pp owner postgres;
CREATE DATABASE
postgres=# grant create on database pp to pp;
GRANT
postgres=# \c pp pp
You are now connected to database "pp" as user "pp".
pp=> create schema abc;
CREATE SCHEMA
pp=> \c pp postgres
You are now connected to database "pp" as user "postgres".
pp=# create table abc.a(id int);
CREATE TABLE
pp=# insert into abc.a values (1);
INSERT 0 1
pp=# \c pp pp
You are now connected to database "pp" as user "pp".
pp=> select * from abc.a;
ERROR:  permission denied for relation a
pp=> drop table abc.a;
DROP TABLE
```

best regards,
digoal.


В списке pgsql-bugs по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: TO_DATE Function unintended behavior when month value is greater than 12
Следующее
От: Magnus Hagander
Дата:
Сообщение: Re: BUG #15065: ActivePerl 5.24.3 breaks PG compilation on Windows