BUG #1150: grant options not properly checked
| От | PostgreSQL Bugs List |
|---|---|
| Тема | BUG #1150: grant options not properly checked |
| Дата | |
| Msg-id | 20040511091816.E9887CF519E@www.postgresql.com обсуждение исходный текст |
| Ответы |
Re: BUG #1150: grant options not properly checked
|
| Список | pgsql-bugs |
The following bug has been logged online:
Bug reference: 1150
Logged by: Fabien Coelho
Email address: coelho@cri.ensmp.fr
PostgreSQL version: 7.5 Dev
Operating system: Linux
Description: grant options not properly checked
Details:
It seems that GRANT ALL ON SCHEMA does not properly
check for grantor rights. I haven't tested other
grantable stuff...
repeat:
psql> SELECT CURRENT_USER;
current_user
--------------
hobbes
psql> SELECT * FROM pg_namespace WHERE nspname='foo';
nspname | nspowner | nspacl
---------+----------+----------------------------------------
foo | 101 | {calvin=U*C*/calvin,hobbes=U*C/calvin}
As hobbes, I should only be able to grant usage.
However:
psql> GRANT ALL ON SCHEMA foo TO suzy;
psql> SELECT * FROM pg_namespace WHERE nspname='foo';
nspname | nspowner | nspacl
---------+----------+-------------------------------------------------------
foo | 101 | {calvin=U*C*/calvin,hobbes=U*C/calvin,suzy=UC/hobbes}
Suzy has both Usage and Create rights on schema foo,
although hobbes had only a grant option for usage.
В списке pgsql-bugs по дате отправления: