ALTER ROLE/DATABASE RESET ALL versus security

Поиск
Список
Период
Сортировка
От Tom Lane
Тема ALTER ROLE/DATABASE RESET ALL versus security
Дата
Msg-id 28907.1258157302@sss.pgh.pa.us
обсуждение исходный текст
Ответы Re: ALTER ROLE/DATABASE RESET ALL versus security
Re: ALTER ROLE/DATABASE RESET ALL versus security
Re: ALTER ROLE/DATABASE RESET ALL versus security
Список pgsql-hackers
Дерево обсуждения 
It looks to me like the code in AlterSetting() will allow an ordinary
user to blow away all settings for himself.  Even those that are for
SUSET variables and were presumably set for him by a superuser.  Isn't
this a security hole?  I would expect that an unprivileged user should
not be able to change such settings, not even to the extent of
reverting to the installation-wide default.
        regards, tom lane

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Alvaro Herrera
Дата:
Сообщение: Re: tsearch parser inefficiency if text includes urls or emails - new version
Следующее
От: James Mansion
Дата:
Сообщение: Re: Listen / Notify rewrite