Обсуждение: pgsql-server/ oc/src/sgml/ref/grant.sgml rc/ba ...

CVSROOT:    /cvsroot
Module name:    pgsql-server
Changes by:    tgl@postgresql.org    02/09/03 18:17:35

Modified files:
    doc/src/sgml/ref: grant.sgml
    src/backend/commands: dbcommands.c
    src/backend/utils/adt: acl.c
    src/bin/initdb : initdb.sh

Log message:
    Arrange for the default permissions on a database to allow temp table
    creation to world, but disallow temp table creation in template1.  Per
    latest round of pghackers discussion.
    I did not force initdb, but the permissions lockdown on template1 will
    not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).

I wonder if you should force initdb to make sure everyone during beta
has the same configuration.

---------------------------------------------------------------------------

Tom Lane wrote:
> CVSROOT:    /cvsroot
> Module name:    pgsql-server
> Changes by:    tgl@postgresql.org    02/09/03 18:17:35
>
> Modified files:
>     doc/src/sgml/ref: grant.sgml
>     src/backend/commands: dbcommands.c
>     src/backend/utils/adt: acl.c
>     src/bin/initdb : initdb.sh
>
> Log message:
>     Arrange for the default permissions on a database to allow temp table
>     creation to world, but disallow temp table creation in template1.  Per
>     latest round of pghackers discussion.
>     I did not force initdb, but the permissions lockdown on template1 will
>     not take effect unless you do one (or manually REVOKE TEMP ON DATABASE template1 FROM public).
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
>

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

Bruce Momjian <pgman@candle.pha.pa.us> writes:
> I wonder if you should force initdb to make sure everyone during beta
> has the same configuration.

Not worth it.  If we get a bug "I can create temp tables in template1,
but I shouldn't be able to" we'll know why, and I don't really foresee
any other risks ...

            regards, tom lane