Re: Misplaced superuser check in pg_log_backend_memory_contexts()

Поиск
Список
Период
Сортировка
От Michael Paquier
Тема Re: Misplaced superuser check in pg_log_backend_memory_contexts()
Дата
Msg-id YL7aoiXXfIYtUOwj@paquier.xyz
обсуждение исходный текст
Ответ на Re: Misplaced superuser check in pg_log_backend_memory_contexts()  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Misplaced superuser check in pg_log_backend_memory_contexts()  (Fujii Masao <masao.fujii@oss.nttdata.com>)
Re: Misplaced superuser check in pg_log_backend_memory_contexts()  (torikoshia <torikoshia@oss.nttdata.com>)
Список pgsql-hackers
On Sun, Jun 06, 2021 at 11:13:40AM -0400, Tom Lane wrote:
> Julien Rouhaud <rjuju123@gmail.com> writes:
>> However +1 for the patch, as it seems more consistent to always get a
>> permission failure if you're not a superuser.
>
> Yeah, it's just weird if such a check is not the first thing
> in the function.  Even if you can convince yourself that the
> actions taken before that don't create any security issue today,
> it's not hard to imagine that innocent future code rearrangements
> could break that argument.  What's the value of postponing the
> check anyway?

Thanks for the input, I have applied the patch.
--
Michael

Вложения

В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Joel Jacobson"
Дата:
Сообщение: Re: security_definer_search_path GUC
Следующее
От: Julien Rouhaud
Дата:
Сообщение: Re: A modest proposal vis hierarchical queries: MINUS in the column list