DROP TABLE can be issued by schema owner as well as table owner

Поиск
Список
Период
Сортировка
От Derrick Rice
Тема DROP TABLE can be issued by schema owner as well as table owner
Дата
Msg-id BANLkTikpQfBj8EMwjwrA1kXOF1F8J4H6Hw@mail.gmail.com
обсуждение исходный текст
Ответы Re: DROP TABLE can be issued by schema owner as well as table owner  (Guillaume Lelarge <guillaume@lelarge.info>)
Re: DROP TABLE can be issued by schema owner as well as table owner  (Robert Haas <robertmhaas@gmail.com>)
Список pgsql-docs
According to

http://www.postgresql.org/docs/9.0/interactive/sql-droptable.html

"DROP TABLE removes tables from the database. Only its owner can drop a table."

In fact, the schema owner can drop the table, which is clearly stated here:

http://www.postgresql.org/docs/9.0/interactive/sql-dropschema.html

"A schema can only be dropped by its owner or a superuser. Note that the owner can drop the schema (and thereby all contained objects) even if he does not own some of the objects within the schema."

There are likely other places besides the DROP TABLE page which can be misleading with regard to ability to drop a table.  This should be made more clear, since in (possibly contrived) circumstances, being able to drop a table and recreate an exactly similar table may be a vulnerability (if the design assumed the table could only be dropped by the owner).

(Just joined the list to post this -- sorry if it has already been brought up)

Derrick

В списке pgsql-docs по дате отправления:

Предыдущее
От: Susanne Ebrecht
Дата:
Сообщение: Re: non-ASCII characters in SGML documentation (and elsewhere)
Следующее
От: Guillaume Lelarge
Дата:
Сообщение: Re: DROP TABLE can be issued by schema owner as well as table owner