Re: [PATCHES] Users/Groups -> Roles

Поиск
Список
Период
Сортировка
От Bruno Wolff III
Тема Re: [PATCHES] Users/Groups -> Roles
Дата
Msg-id 20050628195207.GB12571@wolff.to
обсуждение исходный текст
Ответ на Re: [PATCHES] Users/Groups -> Roles  (Stephen Frost <sfrost@snowman.net>)
Ответы Re: [PATCHES] Users/Groups -> Roles  (Bruno Wolff III <bruno@wolff.to>)
Re: [PATCHES] Users/Groups -> Roles  (Stephen Frost <sfrost@snowman.net>)
Список pgsql-hackers
On Tue, Jun 28, 2005 at 14:45:06 -0400, Stephen Frost <sfrost@snowman.net> wrote:
> 
> If you are the owner of the object to be changed (following the normal
> owner checking rules) AND would still be considered the owner of the
> object *after* the change, then you can change the ownership.  

That still isn't a good idea, because the new owner may not have had
access to create the object you just gave to them. Or you may not have
had access to drop the object you just gave away. That is going to
be a security hole.


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Re: Proposed TODO: --encoding option for pg_dump
Следующее
От: Bruno Wolff III
Дата:
Сообщение: Re: [PATCHES] Users/Groups -> Roles