RE: Create user/create database outside template1

From: Peter Mount <petermount(at)it(dot)maidstone(dot)gov(dot)uk>
To: "'Bruce Momjian'" <pgman(at)candle(dot)pha(dot)pa(dot)us>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: RE: Create user/create database outside template1
Date: 2000-05-26 06:43:08
Message-ID: 1B3D5E532D18D311861A00600865478CF1AE60@exchange1.nt.maidstone.gov.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Isn't template1 just that, a template?

If a user has the ability to create a user or database, then they should
be able to do it from anywhere.

Personally, I think normal users shouldn't have access to template1,
simply because they could create objects in there that can be copied
into _any_new_ database.

Peter

--
Peter Mount
Enterprise Support
Maidstone Borough Council
Any views stated are my own, and not those of Maidstone Borough Council.

-----Original Message-----
From: Bruce Momjian [mailto:pgman(at)candle(dot)pha(dot)pa(dot)us]
Sent: Thursday, May 25, 2000 5:18 PM
To: PostgreSQL-development
Subject: [HACKERS] Create user/create database outside template1

What happens if people issue create user or create database outside
template1. Do we need to prevent it? Seems they work, but am not sure
it is OK. Do we need to add a check?

--
Bruce Momjian | http://www.op.net/~candle
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania
19026

Browse pgsql-hackers by date

  From Date Subject
Next Message Mikheev, Vadim 2000-05-26 07:00:26 RE: smgrwrite() without LockBuffer(was RE: Shouldn't fl ush dirty buffers at shutdown ?)
Previous Message Andreas Zeugswetter 2000-05-26 06:30:41 Re: AW: Performance (was: The New Slashdot Setup (includes MySqlserver))