Re: Insufficient attention to security in contrib (mostly)

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Insufficient attention to security in contrib (mostly)
Дата
Msg-id 28392.1188317523@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Insufficient attention to security in contrib (mostly)  (Dave Page <dpage@postgresql.org>)
Список pgsql-hackers
Dave Page <dpage@postgresql.org> writes:
> Tom Lane wrote:
>> * tablespace-size function requires being owner of current DB.

> I assume superusers will also be able to use it, not just the actual owner?

Right --- it'd be an "ownercheck" call which means that superusers and
anyone who's been granted membership in the owning role will succeed,
not just exact matches to the role OID.

However the privilege-bit alternatives might be easier to manage.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Heikki Linnakangas"
Дата:
Сообщение: Re: Testing the other tsearch dictionaries
Следующее
От: Kevin Neufeld
Дата:
Сообщение: PickSplit method of 2 columns ... error