DROP TABLE can be issued by schema owner as well as table owner
От
Derrick Rice
Тема
DROP TABLE can be issued by schema owner as well as table owner
Дата
Msg-id
BANLkTikpQfBj8EMwjwrA1kXOF1F8J4H6Hw@mail.gmail.com
Список
Дерево обсуждения
DROP TABLE can be issued by schema owner as well as table owner Derrick Rice <derrick.rice@gmail.com>
Re: DROP TABLE can be issued by schema owner as well as table
owner Guillaume Lelarge <guillaume@lelarge.info>
Re: DROP TABLE can be issued by schema owner as well as table owner Derrick Rice <derrick.rice@gmail.com>
Re: DROP TABLE can be issued by schema owner as well as table owner Alvaro Herrera <alvherre@commandprompt.com>
Re: DROP TABLE can be issued by schema owner as well as table
owner Guillaume Lelarge <guillaume@lelarge.info>
Re: DROP TABLE can be issued by schema owner as well as table owner Robert Haas <robertmhaas@gmail.com>
Re: DROP TABLE can be issued by schema owner as well
as table owner Bruce Momjian <bruce@momjian.us>
Re: DROP TABLE can be issued by schema owner as well as table owner Robert Haas <robertmhaas@gmail.com>
Re: DROP TABLE can be issued by schema owner as well
as table owner Bruce Momjian <bruce@momjian.us>
Re: DROP TABLE can be issued by schema owner as well as table owner Robert Haas <robertmhaas@gmail.com>
Re: DROP TABLE can be issued by schema owner as well
as table owner Bruce Momjian <bruce@momjian.us>
Re: DROP TABLE can be issued by schema owner as well as table owner Derrick Rice <derrick.rice@gmail.com>
According to
http://www.postgresql.org/docs/9.0/interactive/sql-droptable.html
"DROP TABLE removes tables from the database. Only its owner can drop a table."
In fact, the schema owner can drop the table, which is clearly stated here:
http://www.postgresql.org/docs/9.0/interactive/sql-dropschema.html
"A schema can only be dropped by its owner or a superuser. Note that the owner can drop the schema (and thereby all contained objects) even if he does not own some of the objects within the schema."
There are likely other places besides the DROP TABLE page which can be misleading with regard to ability to drop a table. This should be made more clear, since in (possibly contrived) circumstances, being able to drop a table and recreate an exactly similar table may be a vulnerability (if the design assumed the table could only be dropped by the owner).
(Just joined the list to post this -- sorry if it has already been brought up)
Derrick
http://www.postgresql.org/docs/9.0/interactive/sql-droptable.html
"DROP TABLE removes tables from the database. Only its owner can drop a table."
In fact, the schema owner can drop the table, which is clearly stated here:
http://www.postgresql.org/docs/9.0/interactive/sql-dropschema.html
"A schema can only be dropped by its owner or a superuser. Note that the owner can drop the schema (and thereby all contained objects) even if he does not own some of the objects within the schema."
There are likely other places besides the DROP TABLE page which can be misleading with regard to ability to drop a table. This should be made more clear, since in (possibly contrived) circumstances, being able to drop a table and recreate an exactly similar table may be a vulnerability (if the design assumed the table could only be dropped by the owner).
(Just joined the list to post this -- sorry if it has already been brought up)
Derrick
В списке pgsql-docs по дате отправления
От: Susanne Ebrecht
Дата:
От: Guillaume Lelarge
Дата: