Обсуждение: BUG #6524: lpermission denied to create extension "ltree". Must be superuser to create this extension.

The following bug has been logged on the website:

Bug reference:      6524
Logged by:          naox
Email address:      spamik@yum.pl
PostgreSQL version: 9.1.3
Operating system:   linux
Description:=20=20=20=20=20=20=20=20

CREATE EXTENSION ltree;
ERROR:  permission denied to create extension "ltree"
HINT:  Must be superuser to create this extension.

Why does ltree require superuser privledge? Is it dangerous and allow
circumventing server security? No mention of this in manual so it is either
documentation problem or a too strict check problem.

On Fri, Mar 9, 2012 at 8:50 PM,  <spamik@yum.pl> wrote:

> CREATE EXTENSION ltree;
> ERROR: =A0permission denied to create extension "ltree"
> HINT: =A0Must be superuser to create this extension.
>
> Why does ltree require superuser privledge? Is it dangerous and allow
> circumventing server security? No mention of this in manual so it is eith=
er
> documentation problem or a too strict check problem.

The bulk of ltree--1.0.sql contains commands which must be executed by
superuser (e.g. creating C language functions, or CREATE OPERATOR
CLASS).

And the text for appendix F[1] does in fact mention that contrib
modules will need to be installed by a superuser, so this restriction
is not entirely undocumented.

Josh

[1] http://www.postgresql.org/docs/devel/static/contrib.html